Cyber Risk & Compliance Analyst

Aggreko, LLC; Glasgow; On-site; GBP 65,000 - 90,000; Full time

Benefits offered by this job

Pension plan

Bonus scheme

Life Assurance

Generous holiday entitlement

Personal development

Volunteer time off

Employee Assistance Programme

Job summary

Aggreko in Glasgow is seeking a Cyber Security Analyst to manage and mitigate information and IT risks across Aggreko’s estate. You will play a key role in shaping risk-based security controls and assurance activities.

You'll design, test and maintain security controls, coordinate audits and reports, and work with IT, procurement, legal, and internal audit to ensure timely risk remediation. Equal opportunity employer.

Qualifications

• Experience in an information security, cyber risk, or GRC role with practical involvement in risk management, control testing, audit support, or compliance activities.
• Strong understanding of information security frameworks and standards such as ISO 27001, NIST, or equivalent, and how controls operate in practice.
• Proven experience gathering, validating, and maintaining audit-ready evidence and supporting internal or external audits and customer assurance.

Responsibilities

• Execute information security control testing across defined frameworks and regulatory requirements, ensuring results are evidence-based, repeatable, and audit ready.
• Design and maintain automated evidence collation processes to reduce manual effort and improve consistency of assurance activities.
• Support risk reduction initiatives through tracking, coordination, and timely follow-up of agreed risk treatment plans.
• Drive exception management processes, ensuring exceptions are clearly documented, time-bound, risk assessed, and reviewed appropriately.
• Coordinate and support periodic user access reviews, working with system owners to validate access, remediate gaps, and retain evidence.
• Produce clear, accurate compliance and risk reporting for internal stakeholders, auditors, and customer assurance activities.
• Act as a central point of coordination between IT, Digital and transformation initiatives, Procurement, Legal, Sales, Service Desk, Internal Audit, and external third parties for risk and compliance-related matters.

Job description

Aggreko in Glasgow is seeking a Cyber Security Analyst to manage and mitigate information and IT risks across Aggreko’s estate. You will play a key role in shaping risk-based security controls and assurance activities.

You'll design, test and maintain security controls, coordinate audits and reports, and work with IT, procurement, legal, and internal audit to ensure timely risk remediation. Equal opportunity employer.