Information Security Specialist - Awareness & Risk

clydeco; Glasgow; On-site; GBP 55,000 - 75,000; Full time

Job summary

Clyde & Co is seeking an Information Security Specialist in Glasgow to lead the security awareness programme and manage supplier security risk across the firm. You will own training initiatives, liaise with providers and drive behavioural change to strengthen the security culture.

Responsibilities include phishing simulations, CSAM campaigns, stakeholder engagement and producing management reports with security insights.

Qualifications

• Experience in managing security awareness and training programmes.
• Knowledge of phishing simulations and user behavioural analytics.
• Familiarity with third-party risk management and supplier assurance.

Responsibilities

• Manage phishing simulation campaigns, awareness training initiatives and behavioural change activities to improve security culture and reduce cyber risk.
• Coordinate annual security campaigns including CSAM, mandatory training activities and targeted awareness initiatives.
• Monitor threats, industry practices and awareness trends, recommending improvements to strengthen resilience and human-risk management.
• Maintain and manage initiative plans, milestones, dependencies and reporting for security improvement programmes.
• Own and maintain productive relationships with external vendors to ensure quality, effectiveness and continuous improvement of awareness and training services.
• Monitor vendor performance against service levels, metrics and contractual commitments, driving improvements where needed.
• Produce tailored management reports, dashboards and presentations for senior leaders with insights into programme performance and risk.
• Partner with senior stakeholders to boost engagement, improve completion rates and promote a strong security culture.
• Present findings and updates to management in a clear, business-focused manner.
• Maintain, execute and enhance third-party and supply chain security risk management processes including tiering by risk and TPISA assessments.
• Design and operate supplier security assessment mechanisms and review processes.
• Manage information security within the supplier lifecycle and address risks and remediation actions.
• Collaborate with Information Security, IT, Procurement and Risk/Legal to integrate security requirements into operations.
• Monitor, analyse and assess emerging supply chain threats and incidents impacting the firm.
• Develop understanding of the supplier estate and identify concentration and critical supplier exposures.
• Improve third-party risk management processes and assurance activities to match the risk landscape.
• Establish assurance activities over key suppliers via audits, certifications and attestations.

Job description

Clyde & Co is seeking an Information Security Specialist in Glasgow to lead the security awareness programme and manage supplier security risk across the firm. You will own training initiatives, liaise with providers and drive behavioural change to strengthen the security culture.

Responsibilities include phishing simulations, CSAM campaigns, stakeholder engagement and producing management reports with security insights.