Information Security & Risk Awareness Lead

Whereby; Glasgow; On-site; GBP 55,000 - 85,000; Full time

Job summary

Clyde & Co in Glasgow is seeking an Information Security Specialist to lead security awareness, supplier risk management, and Email DLP initiatives. You will own the awareness programme, manage phishing simulations, and drive a strong security culture across the firm.

You will coordinate third-party risk controls, oversee supplier assurance, support audits for Cyber Essentials/ISO 27001, and collaborate with IT, Risk, Legal and Procurement to embed security into operational processes.

Qualifications

• Experience in information security and IT risk management within a fast-paced environment.
• Familiarity with international information security standards and risk management frameworks.
• Experience with third-party risk management and vendor risk controls.
• Experience with security awareness programs and phishing simulations.

Responsibilities

• Lead design, implementation, and continuous improvement of security awareness and human-risk programs.
• Coordinate third-party security risk management processes and supplier risk assessments.
• Oversee supplier assurance activities and ensure compliance with risk frameworks.
• Support audits and certifications such as Cyber Essentials and ISO 27001.
• Produce dashboards and reports for senior leadership on programme performance.

Skills

Information security

Vendor risk management

Security awareness

DLP knowledge

Threat monitoring

Tools

Mitratech Prevalent

OneTrust

Panorasys

Proofpoint

KnowBe4

Hoxhunt

Proofpoint Tessian

Mimecast

Abnormal

Synthesia

Colossyan

Job description

Clyde & Co in Glasgow is seeking an Information Security Specialist to lead security awareness, supplier risk management, and Email DLP initiatives. You will own the awareness programme, manage phishing simulations, and drive a strong security culture across the firm.

You will coordinate third-party risk controls, oversee supplier assurance, support audits for Cyber Essentials/ISO 27001, and collaborate with IT, Risk, Legal and Procurement to embed security into operational processes.