Cyber Security Lead

Hymans Robertson LLP.; Glasgow; Hybrid; GBP 60,000 - 100,000; Full time

Job summary

An established industry player is seeking a passionate Cyber Security Lead to join their dynamic IT department. In this full-time role, you'll manage a skilled team, drive innovative security initiatives, and enhance the value of existing technologies. You'll collaborate with various teams to implement best practices and ensure robust security measures are in place. With a commitment to personal and professional growth, this opportunity offers a supportive environment where your ideas are valued. If you have a strong background in cyber security and a desire to make a difference, this could be the perfect role for you.

Benefits

Flexible employee benefits

Mental health assistance

Professional development opportunities

Paid volunteering leave

Birthday leave

Hybrid working model

Flexible working hours

Qualifications

• Experience managing a cyber security team and driving initiatives.
• Strong knowledge of M365 security and vulnerability management.

Responsibilities

• Lead and mentor the cyber security team while managing projects.
• Ensure compliance with security standards and improve existing processes.

Skills

Cyber Security

Team Management

Vulnerability Management

Microsoft 365 Security

Agile/Scrum Methodology

Technical Documentation

Cloud Security

Incident Response

Education

Degree in IT

Tools

Azure DevOps

M365 Stack

Cloudflare

Firewalls

Job description

This is a Permanent, Full Time vacancy that will close in 18 days at 23:59 BST.

The Vacancy

We currently have an exciting opportunity to join our IT department as a Cyber Security Lead, on a full time basis in our Glasgow office.

What will your role look like?

Our IT team is made up of enthusiastic and experienced IT professionals who provide innovative technology in a collaborative and supportive environment. This role sits within our IT networking and security team who are responsible for maintaining key cyber security technologies along with the underlying network infrastructure. For this role we are looking to recruit an experienced Cyber Security Lead, who would like the opportunity to expand their knowledge further in this area. You will be responsible for managing a small team of cyber security engineers, driving new cyber security initiatives, maximising the value we get from existing cyber security technologies including our M365 tenancy and assisting with colleagues and the IT Network & Security Manager to deliver the IT business plan.

Our firm invests in the latest industry leading technologies to facilitate the delivery of our ground-breaking business solutions. We adopt integrated ways of working such as “DevOps” and employ Agile/Scrum methodology approach to manage our work.

Though this is a varied role, your key tasks will include:

1. Manage, mentor, and help to develop the cyber security team.
2. Using Azure DevOps, set and manage the teams project related and non-service desk tasks for the upcoming year.
3. Manage, or act in an advisory capacity to members of the team for all service request tickets that relate to cyber security. Ensure the team comply with agreed service desk SLA’s.
4. Look to adopt and get more value from our existing Microsoft Licensing Agreement.
5. Work closely with the Security Operating Centre and Networking engineers, to drive security initiatives across the wider team.
6. Participate in and deliver multi-discipline/cross team projects acting as the cyber security subject matter expert.
7. Act as the technical lead and escalation point for all cyber security related queries.
8. Research and advise on the latest cyber security best practices and solutions, make recommendations to the business where necessary.
9. Provide a key technical mentoring capability to staff, participating in knowledge transfer and training sessions (a strong technical cyber security background is required for this role.)
10. Ensure cyber security platforms are actively monitored and responded to in an appropriate way.
11. Make use of automation tools to drive up efficiency, where possible.
12. Technical involvement in scoping, researching, vendor selection, implementation, configuration, documentation and roll out of strategic security technologies – working with industry leading vendors.
13. Work with fellow team members and the IT Network & Security Manager to build strategic partnerships and relationships with key vendors and suppliers.
14. Evaluate emerging technologies in the marketplace and to raise a business case for adoption where tangible benefits can be brought to the firm.
15. Continuous improvement – drive through identified improvements and/or additional controls and procedures as necessary to sustain our ISO-27001 and Cyber Essentials accreditation.
16. Adhere to the firm’s Information Security standards, policies and procedures ensuring that they are embedded in everything that we do. Act in advisory capacity, to external audits and due diligence questionnaires.

Key Technologies:

• Strong practical knowledge of M365 stack from a security perspective (Defender, Azure)
• Vulnerability Management
• Web Application Filtering
• DLP
• Cloudflare
• Secure File Transfer
• Firewalls
• Remote Access/VPN
• PKI Infrastructure
• DNS
• Email Gateways
• Security Audits
• ISO27001
• Azure DevOps (Scrum principles, Release Pipelines)
• Knowledge of Mitre Attack Framework
• ITIL (Supervising Service Desk Queue)
• Strong Interest In all aspects of security
• Microsoft Operating Systems (Desktop, Server)
• Exchange Online

To succeed in and enjoy this role you are likely to have a real passion for and want to develop your career further within IT Security, you will currently be working at an architect level with a high level of experience in industry leading security products. In addition, you will be used to managing a small team of people. You should have experience (at a senior level) of implementing complex IT security projects and security infrastructure, ideally covering some of the specific technologies in our estate as well as sound document authoring skills. You will enjoy working as a part of a team and be adept at communicating complex technical concepts to the business and colleagues alike. Experience of working in an Agile/Scrum environment would be beneficial as would the ability to work in partnership with industry leading technology providers to deliver new projects.

Qualifications:

• Degree in IT, or relevant experience.

The following IT Certifications would be advantageous (but not essential):

• Microsoft Certified Cybersecurity Architect Expert
• Microsoft - MCSE, MCSA, MCITP
• Security +
• Network +
• Checkpoint – CCSA, CCSE

In addition to a competitive salary and access to our profit share scheme, we offer:

• A flexible selection of employee benefits, so you can choose a package that best matches your lifestyle and needs.
• A collaborative and encouraging work environment where your thinking and ideas are encouraged.
• On site mental health and wellbeing assistance.
• A commitment to helping you develop both personally and professionally, with mentoring opportunities and access to our award-winning learning portal, Aspire.
• Regular social activities, in addition to three days paid volunteering leave each year and a day’s leave to celebrate your birthday.
• Hybrid working so you can enjoy the positive wellbeing of working from home as well as the benefits of meeting colleagues in our sociable, modern office environments – with the expectation of two ‘in-office’ days per week.
• A flexible working window, allowing colleagues the freedom to work flexibly between the hours of 7am and 7pm.

Please note, we recruit on a rolling basis so early applications are recommended to avoid disappointment.

About Us

Together, we’ve been building better futures for over 100 years. For our people, our clients and their people, our communities and the environment.

We thrive on tackling complex problems. And we believe those problems are best solved by diverse teams – diverse in skills, approaches and backgrounds. Our independence lets our people be themselves and think freely, while working in a collaborative, supportive environment. We love innovative, independent thinking and want everyone to share their ideas.

Working alongside employers, trustees and financial services institutions, we offer pensions, investments, benefits and risk consulting services, as well as data and technology solutions. With over 1000 employees and counting, we’re one of the leading consultancies in our field and are proud to be recognised by numerous industry awards.

We’re committed to developing our people and encourage everyone to carve out their own career path. We’ve many colleagues who started out in one team in the business and have ended up somewhere completely different, having had the chance to develop new skills and explore new passions.

We are continually working to improve our inclusive culture and employ diverse talent. We therefore welcome applications from people from all backgrounds, which includes but isn’t limited to: age, disability, ethnic heritage, gender, marital or civil partnership status, neurodiversity, religion, sexual orientation, and socio-economic background.

Our hybrid working model offers the best of both worlds – home working as well as a fun, collaborative office environment - meaning flexible working patterns to accommodate individual needs. Find out more about our careers here.

If you need any assistance in relation to a personal requirement, medical condition or neurological difference during our selection process then please let us know.

Together, we can make this the best job you’ll ever have.