Cyber Security Lead

Hymans Robertson LLP; Glasgow; Hybrid; GBP 50,000 - 90,000; Full time

Job description

The Vacancy

We currently have an exciting opportunity to join our IT department as a Cyber Security Lead, on a full time basis in our Glasgow office.

What will your role look like?

Our IT team is made up of enthusiastic and experienced IT professionals who provide innovative technology in a collaborative and supportive environment. This role sits within our IT networking and security team who are responsible for maintaining key cyber security technologies along with the underlying network infrastructure. For this role we are looking to recruit an experienced Cyber Security Lead, who would like the opportunity to expand their knowledge further in this area. You will be responsible for managing a small team of cyber security engineers, driving new cyber security initiatives, maximising the value we get from existing cyber security technologies including our M365 tenancy and assisting with colleagues and the IT Network & Security Manager to deliver the IT business plan.

Our firm invests in the latest industry leading technologies to facilitate the delivery of our ground-breaking business solutions. We adopt integrated ways of working such as "DevOps" and employ Agile/Scrum methodology approach to manage our work.

Though this is a varied role, your key tasks will include:

1. Manage, mentor, and help to develop the cyber security team.
2. Using Azure Devops, set and manage the teams project related and non-service desk tasks for the upcoming year.
3. Manage, or act in an advisory capacity to members of the team for all service request tickets that relate to cyber security. Ensure the team comply with agreed service desk SLA's.
4. Look to adopt and get more value from our existing Microsoft Licensing Agreement.
5. Work closely with the Security Operating Centre and Networking engineers, to drive security initiatives across the wider team.
6. Participate in and deliver multi-discipline/cross team projects acting as the cyber security subject matter expert.
7. Act as the technical lead and escalation point for all cyber security related queries.
8. Research and advise on the latest cyber security best practises and solutions, make recommendations to the business where necessary.
9. Provide a key technical mentoring capability to staff, participating in knowledge transfer and training sessions (a strong technical cyber security background is required for this role.)
10. Ensure cyber security platforms are actively monitored and responded to in an appropriate way.
11. Make use of automation tools to drive up efficiency, where possible.
12. Technical involvement in scoping, researching, vendor selection, implementation, configuration, documentation and roll out of strategic security technologies - working with industry leading vendors.
13. Work with fellow team members and the IT Network & Security Manager to build strategic partnerships and relationships with key vendors and suppliers.
14. Evaluate emerging technologies in the marketplace and to raise a business case for adoption where tangible benefits can be brought to the firm.
15. Continuous improvement - drive through identified improvements and/or additional controls and procedures as necessary to sustain our ISO-27001 and Cyber Essentials accreditation.
16. Adhere to the firm's Information Security standards, policies and procedures ensuring that they are embedded in everything that we do. Act in advisory capacity, to external audits and due diligence questionnaires.

Key Technologies:

• Strong practical knowledge of M365 stack from a security perspective (Defender, Azure)
• Vulnerability Management
• Web Application Filtering
• DLP
• Cloudflare
• Secure File Transfer
• Firewalls
• Remote Access/VPN
• PKI Infrastructure
• DNS
• Email Gateways
• Security Audits
• ISO27001
• Cyber Essentials

Desirable Technologies:

• Azure DevOps (Scrum principles, Release Pipelines)
• Knowledge of Mitre Attack Framework
• Strong Networking Principals
• ITIL (Supervising Service Desk Queue)
• Strong Interest In all aspects of security
• Scripting (PowerShell, Python, Azure CLI, Yaml, etc)
• Microsoft Operating Systems (Desktop, Server)
• Exchange Online

To succeed in and enjoy this role you are likely to have a real passion for and want to develop your career further within IT Security, you will currently be working at an architect level with a high level of experience in industry leading security products. In addition, you will be used to managing a small team of people. You should have experience (at a senior level) of implementing complex IT security projects and security infrastructure, ideally covering some of the specific technologies in our estate as well as sound document authoring skills. You will enjoy working as a part of a team and be adept at communicating complex technical concepts to the business and colleagues alike. Experience of working in an Agile/Scrum environment would be beneficial as would the ability to work in partnership with industry leading technology providers to deliver new projects.

Qualifications:

• Degree in IT, or relevant experience.

The following IT Certifications would be advantageous (but not essential):

• Microsoft Certified Cybersecurity Architect Expert
• Microsoft - MCSE, MCSA, MCITP
• Security +
• Network +
• Checkpoint - CCSA, CCSE

In addition to a competitive salary and access to our profit share scheme, we offer:

• A flexible selection of employee benefits, so you can choose a package that best matches your lifestyle and needs.
• A collaborative and encouraging work environment where your thinking and ideas are encouraged.
• On site mental health and wellbeing assistance.
• A commitment to helping you develop both personally and professionally, with mentoring opportunities and access to our award-winning learning portal, Aspire.
• Regular social activities, in addition to three days paid volunteering leave each year and a day's leave to celebrate your birthday.
• Hybrid working so you can enjoy the positive wellbeing of working from home as well as the benefits of meeting colleagues in our sociable, modern office environments - with the expectation of two 'in-office' days per week.
• A flexible working window, allowing colleagues the freedom to work flexibly between the hours of 7am and 7pm.

Please note, we recruit on a rolling basis so early applications are recommended to avoid disappointment.

About Us

Together, we've been building better futures for over 100 years. For our people, our clients and their people, our communities and the environment.

We thrive on tackling complex problems. And we believe those problems are best solved by diverse teams - diverse in skills, approaches and backgrounds. Our independence lets our people be themselves and think freely, while working in a collaborative, supportive environment. We love innovative, independent thinking and want everyone to share their ideas.

Working alongside employers, trustees and financial services institutions, we offer pensions, investments, benefits and risk consulting services, as well as data and technology solutions. With over 1000 employees and counting, we're one of the leading consultancies in our field and are proud to be recognised by numerous industry awards.

We're committed to developing our people and encourage everyone to carve out their own career path. We've many colleagues who started out in one team in the business and have ended up somewhere completely different, having had the chance to develop new skills and explore new passions.

We are continually working to improve our inclusive culture and employ diverse talent. We therefore welcome applications from people from all backgrounds, which includes but isn't limited to: age, disability, ethnic heritage, gender, marital or civil partnership status, neurodiversity, religion, sexual orientation, and socio-economic background.

Our hybrid working model offers the best of both worlds - home working as well as a fun, collaborative office environment - meaning flexible working patterns to accommodate individual needs. Find out more about our careers here.

If you need any assistance in relation to a personal requirement, medical condition or neurological difference during our selection process then please let us know.

Together, we can make this the best job you'll ever have.

We Offer

Our culture

We live and breathe our four values - friendly, confident, partnering and straightforward - and genuinely care about our people, clients, community and the environment.

Job satisfaction

Every employee can genuinely make a difference and contribute towards achieving our purpose - together, building better futures. Whether that's helping our clients build more secure financial futures, using your 3 days volunteering or helping us reduce our carbon footprint.

Reward and wellbeing

We offer competitive salaries, a share of company profits and an award-winning benefits package. We also take your mental, physical, social and financial wellbeing seriously, both in and outside of work.

Flexible working

We trust our people to work in a pattern that suits their circumstances with a healthy balance of home and office working.

Latest technology

We use the most up-to-date technology and software to match our ground-breaking business solutions that make life easier for us and our clients.

Career development

There is no linear path - learning opportunities are plentiful and empower you to carve out your own career.