Cyber Security Consultant

Arnold Clark Group; Glasgow; Hybrid; GBP 65,000 - 90,000; Full time

Benefits offered by this job

33 days’ annual leave

Flexible leave

Private healthcare

Workplace pension

Employee discounts

Job summary

Arnold Clark Group is seeking an experienced Cyber Security Consultant to oversee large security projects and align them with our standards and policies. The role involves working with third-party suppliers and internal stakeholders to strengthen defences and drive secure implementations.

You will lead security assessments, develop mitigation strategies and provide expert guidance on best practices for protecting systems and data.

Qualifications

• Minimum five years’ cyber-related experience.
• Experience in stakeholder management.
• Experience in coaching and mentoring fellow Cyber Security team members.
• Experience implementing solutions meeting NIST CSF, CIS v8.0 and CE+ requirements.
• Ability to work under direction of Security Advisory Manager.
• Ability to work under pressure and complete project documentation.
• Establish and maintain relationships with internal stakeholders and third parties.

Responsibilities

• Oversee large-scale security projects involving multiple parties and teams.
• Conduct comprehensive security assessments of systems, networks and applications.
• Identify vulnerabilities, weaknesses and threats in Arnold Clark’s security posture.
• Develop and implement strategies to mitigate risks and strengthen defences.
• Provide expert guidance on best practices for securing systems and data.
• Assist with implementing security controls and solutions.
• Stay up to date on cyber threats, trends and technologies.
• Communicate with stakeholders to convey technical information and recommendations.
• Collaborate with IT teams to remediate findings from penetration testing.

Skills

Stakeholder management

Coaching & mentoring

NIST CSF

CIS v8.0

CE+

Work under pressure

Project documentation

Relationship management

Job description

We are recruiting for an experienced Cyber Security Consultant to oversee large-scale security projects.

We offer

• 33 days’ annual leave
• Flexible leave
• Generous employee discounts
• Private healthcare
• Workplace pension
• …and much more

Hours

Full time: Monday – Friday 8.30am – 5pm

Location

Kilbirnie Street, Glasgow. This is a hybrid role which involves three days at home and two days in the office.

About the role

As a Cyber Security Consultant, you’ll work closely with our third-party suppliers and internal stakeholders to ensure all project work is aligned with our standards and policies. You’ll oversee large-scale security projects and develop strategies to strengthen our security defences.

Day-to-day duties

• Oversee large-scale security projects involving multiple parties and teams
• Conduct comprehensive security assessments of systems, networks, and applications
• Identify vulnerabilities, weaknesses and threats in Arnold Clark’s security postures
• Develop and implement strategies to mitigate risks and strengthen security defences
• Provide expert guidance and recommendations on best practices for securing systems and data
• Assist with implementing security controls and solutions
• Stay up to date on the latest cyber security threats, trends, and technologies
• Communicate effectively with internal and external stakeholders, both verbally and in writing, to convey technical information and recommendations.
• Work collaboratively with IT teams to remediate findings identified through penetration testing
• Assist members of Cyber Security with any relevant issues that may arise
• Assist GRC team with policy and standard writing/updating

Essential skills and experience

• Minimum five years’ cyber-related experience
• Experience in stakeholder management
• Experience in coaching and mentoring fellow Cyber Security team members
• Experience in implementing solutions that meet the requirements of NIST CSF, CIS v8.0 and CE+
• Ability to work under the direction of the Security Advisory Manager
• Ability to work under pressure
• Ability to complete project documentation in line with processes
• Establish and maintain relationships with all internal stakeholders and third parties

SFIA skills profile

SFIA skill | Code | Target level | Application to this role

Consultancy | CNSL | 5 | Provides specialist cyber security advice and recommendations to projects, technical teams, business stakeholders and third-party suppliers.

Information security | SCTY | 5 | Ensures that security controls, project designs and implementation decisions align with Arnold Clark security policies, standards and risk appetite.

Risk management | BURM | 5 | Identifies, assesses and communicates cyber security risks, recommends proportionate treatment and supports informed risk decisions.

Stakeholder relationship management | RLMT | 5 | Builds and manages productive relationships with business stakeholders, technical teams and strategic suppliers, influencing decisions and resolving security concerns.

Information assurance | INAS | 5 | Assesses whether systems, services and suppliers provide appropriate protection for information and can demonstrate that required controls are operating effectively.

Specialist advice | TECH | 5 | Provides authoritative guidance on cyber security controls, vulnerabilities, threats, remediation and secure implementation.

Audit | AUDT | 4 | Conducts structured security assessments and reviews evidence to identify control weaknesses and compliance gaps.

Project management | PRMG | 4 | Supports and provides security oversight for complex projects involving multiple internal teams and external suppliers.

Our Culture

Arnold Clark is committed to creating a diverse and inclusive workplace. We strive to create an environment where collaboration, unique perspectives and multiple approaches are celebrated. We care about our employees and our communities, we nurture talent and encourage ambition, and we are passionate about people who take pride in their work. Our employees are at the heart of everything we do – diverse in our make-up, united in our goals.

To find out more about Life at Arnold Clark, visit our website.

Employment within the Arnold Clark Group is offered subject to satisfactory reference and disclosure checks.