Cyber Risk & Human Behavior Lead

Iberdrola Group; Glasgow; Hybrid; GBP 53,000 - 65,000; Full time

Benefits offered by this job

36 days annual leave

Share Incentive Plan

Private medical insurance

Cycle to Work scheme

Electric Vehicle schemes

Health assessments

Job summary

ScottishPower, part of the Iberdrola Group, is seeking a Human Risk Manager in Glasgow. The role focuses on cyber risk reduction, NIS compliance, and building a resilient culture.

You will lead behavioural change programmes and collaborate with risk, cyber, and communications teams across multiple locations. Reporting to the SPR Head of Cyber GRC, the role requires experience in threat/risk/human risk functions, strong communication skills, and the ability to drive large-scale organizational

Qualifications

• 4 years’ experience in similar work, preference for industrial sectors such as energy
• Experience in fast-paced, evolving business environments
• Strong oral and written communication skills
• Proven team player capable of fostering efficient collaboration

Responsibilities

• Lead delivery of cyber security behavioural and cultural change programmes across the organisation
• Assess behaviours that hinder a strong cyber security culture using data to identify trends and risks
• Design and deliver awareness campaigns promoting secure behaviours
• Tailor communications to diverse audiences across seniority, roles and locations
• Develop measures to assess effectiveness of initiatives and track improvements in cyber security behaviours

Skills

Behavioural science

Stakeholder communication

Risk assessment

Cyber security culture

Change management

Job description

ScottishPower, part of the Iberdrola Group, is seeking a Human Risk Manager in Glasgow. The role focuses on cyber risk reduction, NIS compliance, and building a resilient culture.

You will lead behavioural change programmes and collaborate with risk, cyber, and communications teams across multiple locations. Reporting to the SPR Head of Cyber GRC, the role requires experience in threat/risk/human risk functions, strong communication skills, and the ability to drive large-scale organizational