Cyber Security Analyst

Aggreko; Glasgow; On-site; GBP 40,000 - 60,000; Full time

Benefits offered by this job

Generous benefits package

Generous holiday entitlement

Focus on personal development

Paid volunteering time

Employee Assistance Programme

Job summary

Aggreko is hiring a Cyber Security Analyst in Glasgow to manage and mitigate risks within their IT estate. The role demands a strong background in information security, including experience with compliance activities and risk management frameworks like ISO 27001 and NIST. You will work closely with multiple stakeholders to ensure security controls are effectively implemented and maintained. The position offers a generous benefits package including a pension plan and opportunities for personal development.

Qualifications

• Experience in information security, cyber risk, or GRC role.
• Strong understanding of information security frameworks like NIST.
• Proven experience with audit-ready evidence gathering.

Responsibilities

• Execute information security control testing across frameworks.
• Design and maintain automated evidence collation processes.
• Support risk reduction initiatives through tracking and coordination.

Skills

Information security experience

Understanding of ISO 27001

Risk management knowledge

Analytical mindset

Effective communication skills

Stakeholder coordination

Job description

Bring your energy to Aggreko as Cyber Security Analyst based in Glasgow. You will play a key role in managing and mitigating information and IT risks within Aggreko's estate.

Power without pause. Heating, cooling and oil‑free air without end. We keep our customers' worlds on. From world‑class events that last a few weeks to mining operations and remote communities who rely on us for decades.

Why Aggreko?

• Generous benefits package (including but not limited to pension plan, bonus scheme, and Life Assurance).
• Generous holiday entitlement, with option to 'buy' or 'sell'.
• A focus on continued personal development.
• Paid time off work for volunteering in the community.
• Access to our Employee Assistance Programme, which helps promote and support a healthy lifestyle.

What you'll do:

• Execute information security control testing across defined frameworks and regulatory requirements, ensuring results are evidence‑based, repeatable, and audit ready.
• Design and maintain automated evidence collation processes to reduce manual effort and improve consistency of assurance activities.
• Support risk reduction initiatives through tracking, coordination, and timely follow‑up of agreed risk treatment plans.
• Drive exception management processes, ensuring exceptions are clearly documented, time‑bound, risk assessed, and reviewed appropriately.
• Coordinate and support periodic user access reviews, working with system owners to validate access, remediate gaps, and retain evidence.
• Produce clear, accurate compliance and risk reporting for internal stakeholders, auditors, and customer assurance activities.
• Act as a central point of coordination between IT, Digital and transformation initiatives, Procurement, Legal, Sales, Service Desk, Internal Audit, and external third parties for risk and compliance‑related matters.

You'll have the following skills and experience:

• Experience in an information security, cyber risk, or GRC role with practical involvement in risk management, control testing, audit support, or compliance activities.
• Strong understanding of information security frameworks and standards such as ISO 27001, NIST, or equivalent, and how controls operate in practice.
• Proven experience gathering, validating, and maintaining audit‑ready evidence and supporting internal or external audits and customer assurance.
• Working knowledge of risk management, including risk assessment, treatment tracking, exception management, and access reviews.
• Analytical mindset with attention to detail and the ability to objectively assess control effectiveness using evidence and data.
• Experience improving or automating assurance and evidence collection processes to reduce manual effort and improve consistency.
• Clear written and verbal communication skills, able to explain risks, controls, and actions to both technical and non‑technical stakeholders.
• Strong stakeholder coordination skills across IT, digital initiatives, procurement, legal, service desk, internal audit, and third parties.
• Organised and outcome‑focused, able to manage multiple assurance activities, follow‑ups, and dependencies in parallel.

Find out more and apply now.

Bring your energy. Grow your career.

LI-AM1

Equal employment opportunity

We welcome people from different backgrounds and cultures, and respect people's unique skills, attitudes and experiences. We encourage everyone to be themselves at work because we know that's how we do our best, for each other, for our customers, for the communities where we work, and for our careers.

We are an equal opportunity employer. If you apply for a role at Aggreko, we will consider your application based on your qualifications and experience, and not on your race, colour, ethnicity, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.