Retail Energy Code Company
Head of Information Security & Data Protection
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Salary: up to £83,000-88,000
Hours: Full-time
Contract Type: Permanent
Location: This is a UK-based remote role, with quarterly travel required for committee meetings (generally held in London), alongside occasional team meetings and social events.
Who are RECCo?
We are an independent, non-profit organisation responsible for the Retail Energy Code — a key part of how the GB retail energy market is regulated.
But we don’t just manage rules. We look ahead, not just react, helping the market change in the right way. We deliver secure digital services, clear governance, and practical solutions that protect consumers, support innovation, and help the energy system move towards net zero.
What you’ll be doing
As data becomes increasingly important in the running of the energy industry, we need a leader of Information Security and Data Protection who can lead these aspects for the consumer consent and help shape our data strategy and services with an information security and data protection lens. By understanding the risks, how to manage and mitigate them you will support a transformation of the energy sector for the benefit of the consumer.
You will have responsibility for ensuring that RECCo and its service providers implement best practice policies, procedures and approaches that address cyber security, data privacy and protection. Including compliance with all relevant laws and regulations.
About RECCo’s Consumer Consent
Consumer Consent is fundamental in enabling consumers to positively share data and get access to new or existing energy services which ultimately will save them money and carbon. Consumer Consent is the be designed to provide a secure, simple and effective user experience, with user-centricity at the heart of every interaction.
As part of the industrial transformation, this Consumer Consent mechanism will not only streamline data sharing but also ensure that consumers trust is improved in energy. Consumer Consent is critical to the future of energy.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Your Responsibilities
- Accountable for Information Security & Data Protection topics including GDPR and Information Security across all RECCo functions.
- Data Protection Officer for RECCo.
- Interface with energy regulator and industry bodies for information security and data protection matters, demonstrating RECCo as a leader in these fields.
- Responsible for Consumer Consent Data Protection and Information Security Matters.
- Responsible for developing and support the data and digital strategies with ownership of information security and data protection aspects, to securely enable broader use of industry data sets for the benefit of the consumer.
- Accountable for developing and manage frameworks, processes, tools and consultancy which supports a risk-based approach within RECCo and our partners for service delivery.
- Monitor compliance with GDPR and other data protection laws.
- Identify acceptable levels of residual risk and manage action plans, policy and changes for risk mitigation.
- Proactive identification of information security and data protection risks and their management and mitigation.
- Complete DPIAs and support RECCo colleagues and partners in a consultive manner on Information Security, GDPR, Data Protection and Cyber aspects.
- Responsible for conducting investigations into information security incidents. Including historic and trending analysis where appropriate.
- Be the point of contact with ICO (Information Commissioner’s Office) and other relevant bodies for RECCo.
About You
- Degree in Computer Science or equivalent with completion of security modules.
- 10 years' experience or equivalent in information security.
- Knowledge, understanding and practical experience working with:
- GDPR, Data Protection laws and rules
- ISO27001
- Excellent problem-solving skills with the ability to analyse complex problems, manage risk, and simplify appropriately for the audience.
- Excellent listening and communication skills (both oral and written)
- Great interpersonal skills and the ability to build relationships quickly with partner organisations.
- Experience in managing change and managing partners
Get help with your application
Your very own career expert that helps elevate your application to the next level.
It would also be great if you had:
- Masters or higher in information security or equivalent
What You’ll Get In Return
We offer a great range of benefits and a collaborative culture in which you’ll have the opportunity to shape how we do things from the ground up during an exciting period of growth.
Employee benefits:
- 25 days annual leave + bank holidays and a holiday buy scheme
- Private medical insurance and life cover
- Employee Assistance Programme with access to an online portal containing a wealth of wellbeing resources, online self-help courses and shopping discounts
- Company pension scheme with 7% employer contributions
- Enhanced parental leave and pay
- 2 paid volunteering days per annum to get involved with a charity or community group of your choice and access to a payroll giving scheme if you'd like to make regular donations to charity
- £45 well-being allowance every month
- Access to lease an Electric Vehicle via a salary sacrifice scheme
- Learning budget which you can use towards courses, books, webinars or conferences
- Knowledge-sharing sessions, e-learning and an online hub of training resources to aid your professional development
Our Commitment
At RECCo we are committed to cultivating an environment that promotes equality, diversity and inclusion. We want you to bring your authentic self to work every day and feel comfortable being you, no matter your age, gender identity, ethnicity, religion, disability status or otherwise.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location