Cyber Fusion CSIRT Lead: Incident Response & Strategy

Iberdrola; Glasgow; Hybrid; GBP 69,000 - 74,000; Full time

Benefits offered by this job

Hybrid working

NSV clearance eligibility

15% bonus potential

Single healthcare

Pension scheme matching

Employee benefits

Job summary

ScottishPower, part of the Iberdrola Group, is seeking a Cyber Fusion CSIRT Lead in Glasgow to mentor analysts, drive tool delivery, and manage incident response. The role requires UK residency, NSV clearance eligibility, and a hybrid working pattern.

You will shape the UK security roadmap, coordinate with Global teams, and oversee security suppliers and 24/7 standby coverage to ensure rapid incident response and resilient operations.

Qualifications

• Specialist knowledge of IT Security and Incident Response with industry qualifications.
• Significant IT Security Operations experience in a global organisation.
• Experience across the Incident Response lifecycle and stakeholder management.
• Experience configuring and supporting security tools and services.

Responsibilities

• Mentor analysts in the CSIRT team and lead delivery of new tools and processes.
• Manage security incidents and day-to-day CSIRT operations in the UK.
• Coordinate with Global Cyber Fusion Centre and other security functions.
• Develop security strategy inputs and the UK security roadmap.
• Oversee supplier activity and 24/7 standby rotations for incidents.

Skills

IT Security

Incident Response

Security Operations

Tooling configuration

Vendor management

Regulatory awareness

OT Security

Roadmap input

Education

Security qualifications

Tools

Security tools

Job description

ScottishPower, part of the Iberdrola Group, is seeking a Cyber Fusion CSIRT Lead in Glasgow to mentor analysts, drive tool delivery, and manage incident response. The role requires UK residency, NSV clearance eligibility, and a hybrid working pattern.

You will shape the UK security roadmap, coordinate with Global teams, and oversee security suppliers and 24/7 standby coverage to ensure rapid incident response and resilient operations.