Cyber Security Consultant

Arnold Clark; Glasgow; Ibrido; GBP 60.000 - 90.000; Tempo pieno

Vantaggi offerti da questo lavoro

33 days' annual leave

Flexible leave

Generous employee discounts

Private healthcare

Workplace pension

Descrizione del lavoro

Arnold Clark is seeking an experienced Cyber Security Consultant to oversee large-scale security projects and ensure alignment with our standards. You will work with third-party suppliers and internal stakeholders to develop strategies that strengthen our security defences.

This hybrid role based in Glasgow offers collaboration across IT, risk and governance teams, with regular reviews, mentoring opportunities, and a focus on delivering robust protection for critical systems and data.

Competenze

• Minimum five years' cyber-related experience.
• Experience in stakeholder management.
• Experience in coaching and mentoring fellow Cyber Security team members.
• Experience in implementing solutions that meet the requirements of NIST CSF, CIS v8.0 and CE+.
• Ability to work under the direction of the Security Advisory Manager.
• Ability to work under pressure.
• Ability to complete project documentation in line with processes.
• Establish and maintain relationships with all internal stakeholders and third parties.

Mansioni

• Oversee large-scale security projects involving multiple parties and teams.
• Conduct comprehensive security assessments of systems, networks, and applications.
• Identify vulnerabilities, weaknesses and threats in Arnold Clark's security postures.
• Develop and implement strategies to mitigate risks and strengthen security defences.
• Provide expert guidance and recommendations on best practices for securing systems and data.
• Assist with implementing security controls and solutions.
• Stay up to date on the latest cyber security threats, trends, and technologies.
• Communicate effectively with internal and external stakeholders, both verbally and in writing, to convey technical information and recommendations.
• Work collaboratively with IT teams to remediate findings identified through penetration testing.
• Assist members of Cyber Security with any relevant issues that may arise.
• Assist GRC team with policy and standard writing/updating.

Conoscenze

Cybersecurity

Stakeholder management

Mentoring

Risk assessment

Project documentation

Communication

NIST CSF/CIS

Descrizione del lavoro

We are recruiting for an experienced Cyber Security Consultant to oversee large-scale security projects.

We offer:

• 33 days' annual leave
• Flexible leave
• Generous employee discounts
• Private healthcare
• Workplace pension
• ...and much more

Hours

Full time: Monday - Friday 8.30am - 5pm

Location

Kilbirnie Street, Glasgow. This is a hybrid role which involves three days at home and two days in the office.

About the role

As a Cyber Security Consultant, you'll work closely with our third-party suppliers and internal stakeholders to ensure all project work is aligned with our standards and policies. You'll oversee large-scale security projects and develop strategies to strengthen our security defences.

Day-to-day duties

• Oversee large-scale security projects involving multiple parties and teams
• Conduct comprehensive security assessments of systems, networks, and applications
• Identify vulnerabilities, weaknesses and threats in Arnold Clark's security postures
• Develop and implement strategies to mitigate risks and strengthen security defences
• Provide expert guidance and recommendations on best practices for securing systems and data
• Assist with implementing security controls and solutions
• Stay up to date on the latest cyber security threats, trends, and technologies
• Communicate effectively with internal and external stakeholders, both verbally and in writing, to convey technical information and recommendations.
• Work collaboratively with IT teams to remediate findings identified through penetration testing
• Assist members of Cyber Security with any relevant issues that may arise
• Assist GRC team with policy and standard writing/updating

Essential skills and experience

• Minimum five years' cyber-related experience
• Experience in stakeholder management
• Experience in coaching and mentoring fellow Cyber Security team members
• Experience in implementing solutions that meet the requirements of NIST CSF, CIS v8.0 and CE+
• Ability to work under the direction of the Security Advisory Manager
• Ability to work under pressure
• Ability to complete project documentation in line with processes
• Establish and maintain relationships with all internal stakeholders and third parties

SFIA skills profile

This role is aligned primarily to SFIA Level 5, reflecting a senior cyber security practitioner who works with broad direction, exercises professional judgement, provides authoritative advice and influences project, supplier and stakeholder decisions.

SFIA skill

Code

Target level

Application to this role

• Consultancy

  CNSL

  5

  Provides specialist cyber security advice and recommendations to projects, technical teams, business stakeholders and third-party suppliers.

  Information security

  SCTY

  5

  Ensures that security controls, project designs and implementation decisions align with Arnold Clark security policies, standards and risk appetite.

  Risk management

  BURM

  5

  Identifies, assesses and communicates cyber security risks, recommends proportionate treatment and supports informed risk decisions.

  Stakeholder relationship management

  RLMT

  5

  Builds and manages productive relationships with business stakeholders, technical teams and strategic suppliers, influencing decisions and resolving security concerns.

  Information assurance

  INAS

  5

  Assesses whether systems, services and suppliers provide appropriate protection for information and can demonstrate that required controls are operating effectively.

  Specialist advice

  TECH

  5

  Provides authoritative guidance on cyber security controls, vulnerabilities, threats, remediation and secure implementation.

  Audit

  AUDT

  4

  Conducts structured security assessments and reviews evidence to identify control weaknesses and compliance gaps.

  Project management

  PRMG

  4

  Supports and provides security oversight for complex projects involving multiple internal teams and external suppliers.

Our Culture

Arnold Clark is committed to creating a diverse and inclusive workplace. We strive to create an environment where collaboration, unique perspectives and multiple approaches are celebrated. We care about our employees and our communities, we nurture talent and encourage ambition, and we are passionate about people who take pride in their work. Our employees are at the heart of everything we do - diverse in our make-up, united in our goals.

To find out more about Life at Arnold Clark, visit our website.

Employment within the Arnold Clark Group is offered subject to satisfactory reference and disclosure checks.