information security manager Review

• Specialist analysis and interpretation of national information security intelligence to enable senior management teams within the business, Internal Controls, Regulatory and Information Security teams and Risk Managers to make key business decisions regarding the future security of E.ON’s systems & process • Shape and implement controls with senior stakeholders around core projects, issues and processes that could affect the secure management of both business and personal data, reducing the reputational and regulatory risk associated with unapproved use. • Measure and improve the performance of Business Units in line with KPI’s and legal, compliance and regulatory standards. Deliver regular reporting in a timely and accurate format to key stakeholders. • Collaboratively engage with Senior Managers and subject-matter-experts to develop a comprehensive gap analysis against information security and data protection requirements. • Develop Board approved milestone plans to reduce risk exposure and drive change. • Develop a suite of information security and protection risks for ongoing monitoring and management. • Challenge the status-quo and drive forward best practice methodologies to ensure E.ON remain at an acceptable level for information security and protection practices in place, gain agreement of improvement outcomes, gaining commitment to change at all levels. • Gaining committed senior management support, up to and including Director level, for initiatives that will yield significant business benefits, minimising exposure and enhancing objective risk tolerance over time. • Creation of internal senior manager stakeholder plan and external stakeholder relationships to ensure best practice is delivered as well as business as usual behaviour by accurate reporting of current state, recent incidents and potential exposures, • Identification of improvements that can be made to support the business in maintaining a robust framework. • Overall ownership of incident management process where issues occur within business unit, and active engagement with Group on these matters. • Challenge of the E.ON IT function to meet the needs of the RU.UK business.

learnt about networking, types of threats face in general, how to search and perform intelligence on computer, extended searches and how to hide digital footprint, how to create a virtual private network, the background of the internet, the dark web and deep web. also learnt some high level skills on Linux and more technical knowledge

learning new skills as well as having the opportunity to use the learners knowledge and expertise to ask questions. I also feel it provides me with the skills and confidence I need in order to fully do my job. I enjoy the time I get away from the office to spend in the QA labs and learn the skills.

I feel as though it could be better structured. for example the course I attended last week was a bit all over the place. for example the trainer would talk us through some slides and I'd ask which page they are in the book so i could make notes against the relevant page in the book but his response was 'this isn't in the book' as the training book was in the process of being updated and going through a different version so I feel as a training group we were disadvantaged.

as I am classed as a more mature apprentice (doing an apprenticeship to extend my knowledge) and the only person within the organisation doing this particular apprenticeship programme I haven't really got any support in the work place when it comes to questions on technical / how to complete the portfolio etc

as I have only just started the apprenticeship programme I can't fully answer this yet. However, the support I have received to date has been on and off. For example I submitted some of my portfolio to my QA assessor to ask if it was along the right lines and I haven't had any response from them

very well, I have already been able to put in to practice what I learnt on just one of the modules and I feel it has better well equipped me with knowledge and skills to be able to challenge the business (which is part of my day to day role) with regards to controls they have in place on cyber security

we used to do these things but they relied heavily on volunteers and we have had lots of changes within the work place so this has recently stopped. there was some one trying to arrange a charity football match. However, there was not enough players or appetite to create a football team so this got cancelled.

Yes

I have been there over 11 years and have always found them to be an employee who takes development seriously and encourages people to develop and grow within the business. for example, they often try to promote and fill roles internally as opposed to going external and bringing new talent in.

they are really keen on development and encourage personal development plans so having one of those in place would certainly help on your career journey. there are lots of different opportunities to take advantage of too and they see potential in their employees and allow them to grow. the opportunity I have been given to complete an apprenticeship programme is extremely rewarding and it shows they value and retain the talent they have within the business