IT Security Lead

Jersey Electricity Plc; Glasgow; On-site; GBP 61,000 - 77,000; Full time

Job summary

A leading company in the energy sector is seeking an IT Security Lead in Glasgow. This role focuses on safeguarding the security of infrastructure services and developing security strategies, supported by a competitive salary and extensive benefits including a generous leave policy, healthcare, and pension contributions. The ideal candidate will possess strong IT security knowledge, relevant qualifications with proven risk management experience, and excellent communication skills.

Benefits

36 days annual leave

Pension scheme with double matching

Holiday purchase scheme

Share Incentive Plan

Life Assurance (4x salary)

Cycle to Work scheme

Public transport season ticket loans

Access to financial wellbeing support

Qualifications

• Proven experience in IT security and risk management.
• Skills in assessing and developing security strategies.
• Ability to communicate technical issues to non-technical stakeholders.

Responsibilities

• Analyze and assess the security posture of infrastructure.
• Develop and support security improvement plans.
• Input into the infrastructure security strategy.

Skills

IT security knowledge

Risk management capability

Threat assessment

Communication skills

Education

CISSP or CISM certification

Relevant industry qualifications

Job description

IT Security Lead

Location: Glasgow - hybrid working

Salary: £61-77K (plus up to 15% bonus, single healthcare)

Permanent, Full Time, Hybrid Working

Help us create a better future, quicker

Joining ScottishPower as an IT Security Lead you will be responsible for analysing and assessing the security posture associated with existing infrastructure services and assets and to identify and support improvement plans that increase the security posture to expected levels. You will work closely with Architecture to look at the market for potential new security solutions which can be deployed by the wider Technology, Platforms, Operations and Cloud team and support the IT Security Manager to define and deliver initiatives associated with the Global IT Security Plan.

This role assures all infrastructure services are secure by design and are compliant with all relevant external security regulation and legislation including relevant Iberdrola group standards.

What you'll be doing

You will provide security design input to the UK IT Technology, Platforms, Operations and Cloud (TPOC) function to ensure that security is embedded by default in all TPO services.

Responsibilities include but are not limited to:

• Provide expert input into the TPOC infrastructure security strategy based on comprehensive assessment of current against target position

• Provide a cost input to annual planning process to ensure change is delivered

• Assess emerging threats and risks associated with infrastructure tools and servicesby performing security risk assessments

• Support strategies for delivering a set of technical security standards and enhancing security controls

• Provide recommendation and expert input of global definition of strategy, standards and procedures relating to TPOC infrastructure security

• Support on pentesting affecting IT assets

• Assessing risk and approving software to get installed in the IT assets

What we're looking for

We are looking for applicants who have detailed technical knowledge of IT security and a proven security risk management capability, including the development, recommendation, and delivery of security remediation plans. Candidates with relevant industry qualifications are desirable (e.g. CISSP or CISM).

You'll have experience in assessing emerging threats, identifying associated risk remediation activities, and supporting the development and delivery of IT infrastructure security strategies. Significant experience assessing technical designs across multiple IT disciplines and defining appropriate security controls if beneficial. An awareness of key legislation and regulation impacting the delivery of IT security.

You will be confident inputting into IT security strategies and articulating these to be understood at all stakeholder levels. A strategic thinker with ability to act tactically when required, and possess excellent communication skills, with an ability to distil technical issues into a form that can be digested by non-technical stakeholders at senior management level. You will be proactive, show own initiative and be adaptable and flexible to changing landscapes in the evolution of the business.

What's in it for you

As well as a competitive salary which is reviewed annually, you can also enjoy a number of other benefits. With our pension scheme, we'll double match your contribution up to a company contribution of 10%.

At ScottishPower, we believe it's the little things we do in life that make a big difference. From helping you look after your family's wellbeing, save for your future and take personal steps for climate action - our benefits are designed to help you do just that - so that you have everything you need to take care of your world - today and tomorrow. That's why our benefits include:

• 36 days annual leave

• Holiday purchase - perfect your work/life balance with extra annual leave

• Share Incentive Plan and Sharesave Scheme

• Payroll giving and charity matched funding

• Technology Vouchers - save more and spread the cost of your technology purposes

• Count us in - pledge to reduce carbon emissions and help fight climate change

• Electric Vehicle Schemes - to help you transition to green/clean driving

• Cycle to Work scheme and public transport season ticket loans

• Options to purchase dental insurance, private medical insurance, health cash plan and annual health assessments

• Life Assurance (4x salary)

• Access to nudge' financial wellbeing support

• Plus shopping, leisure, restaurant and gym discounts, and unique employee deals on travel insurance and more

Why ScottishPower

ScottishPower is part of the Iberdrola Group, one of the world's largest integrated utility companies and a world leader in wind energy. With a commitment to generate all of our energy from renewable resources and a drive to create the energy infrastructure of the future, we're at the forefront of the journey to Net Zero and investing over £6m every working day to make this happen. With diverse opportunities across our businesses and a commitment to invest in our own internal talent, ScottishPower can offer people real career opportunities that meet personal and professional goals, in a global organisation.

Inclusion, diversity, and a social purpose are at the heart of everything we do. Together with our values, they bring us together into a stronger, more sustainable business with direct links to the communities we serve. It takes all kinds of people to build a large-scale business like ours, so whatever your background, you'll fit right in.

ScottishPower is committed to providing reasonable support or adjustments in our recruiting processes for candidates with disabilities, long term conditions, mental health conditions, or who are neurodivergent or require pregnancy-related support.