Cyber Vulnerability & OT Resilience Lead

Iberdrola Group; Glasgow; Hybrid; GBP 53,000 - 65,000; Full time

Benefits offered by this job

36 days annual leave

Holiday purchase plan

Share Incentive Plan

Sharesave scheme

Technology vouchers

Bike/EV schemes

Private medical insurance

Job summary

ScottishPower, part of the Iberdrola Group, seeks a Cyber Security Vulnerability Lead in Glasgow to drive cyber resilience across IT and OT systems. You will lead vulnerability management, testing and Red Team activities, shaping strategic initiatives and working with senior stakeholders to deliver an integrated security program.

Successful candidates will have extensive security operations experience, OT knowledge, and certifications such as CISSP/CISM.

Qualifications

• Strong background in security operations within a large, complex organisation.
• Experience leading security improvement programmes and managing critical vulnerabilities.
• Understanding of OT security environments and regulatory/security challenges for critical infrastructure.
• Professional certifications such as CISSP, CISM, GICSP or OSCP are advantageous and demonstrate IT/OT security expertise.

Responsibilities

• Lead vulnerability management, security testing and cyber resilience initiatives across IT and OT systems.
• Coordinate vulnerability identification services, including penetration testing and Red Team activities.
• Define strategic security initiatives, influence long‑term roadmaps and maximise value from existing investments.
• Build relationships with senior stakeholders, security teams, service providers and business leaders to deliver integrated security strategy.
• Provide expert guidance on tools, processes and operating models for the Cyber Fusion Centre’s evolution in the UK.

Skills

Security operations

Security leadership

OT security

Regulatory awareness

CISSP

CISM

GICSP

OSCP

Job description

ScottishPower, part of the Iberdrola Group, seeks a Cyber Security Vulnerability Lead in Glasgow to drive cyber resilience across IT and OT systems. You will lead vulnerability management, testing and Red Team activities, shaping strategic initiatives and working with senior stakeholders to deliver an integrated security program.

Successful candidates will have extensive security operations experience, OT knowledge, and certifications such as CISSP/CISM.