Lead Cyber Security Advisor

Henderson Scott; Glasgow; Hybrid; GBP 60,000 - 90,000; Full time

Job summary

Henderson Scott is seeking a Cyber Security Advisor to shape cyber security and risk decisions for government-led digital services in Glasgow. The role offers a hybrid model with three days onsite and requires active SC clearance.

I am keen to speak with candidates who have strong information risk management experience and relevant security qualifications. You will advise on digital and cloud solutions, work with delivery and governance teams, and handle information risk management, threat

Qualifications

• Experience in information risk management using NIST 800-30/37 and ISO 31000.
• Hold CISSP, CISM or CRISC qualifications.
• Experience across system, operational and strategic levels of risk with threat modelling.
• Experience turning cyber threat intelligence feeds into actionable reports.
• Advising on standards such as NIST, ISO 27001, CIS, CAF, HMG GovS 007 and NPSA.
• Managing cyber security risks to IT systems, services and data storage, especially in digital cloud services.
• Engaging senior stakeholders across multiple projects with strong written and verbal communication.
• Familiarity with Visio, Jira/Confluence and MS Office; understanding enterprise IT security risks.

Skills

Information risk management

Security qualifications

Threat modelling

Threat intelligence

Security standards

Cloud security

Stakeholder management

Jira/Confluence

Tools

Microsoft Visio

Jira

Confluence

Microsoft Office

Job description

Cyber Security Advisor - Digital Services - Glasgow (Hybrid 3 days onsite) - SC Clearance

I have an immediate opportunity for a Cyber Security Advisor to shape cyber security and risk decisions for high-visibility change projects and services for our government client. You will act as a key cyber specialist, advising on digital and cloud solutions while working directly with delivery and governance teams.

Due to the urgency and nature of the role, ideal candidates will be sole British Nationals with active SC clearance.

I am keen to speak with candidates who have

• Strong information risk management experience, including use of methodologies such as NIST 800-30/37 and ISO 31000.
• CISSP, CISM or CRISC qualification
• Experience working with system, operational and strategic levels of risk and performing threat modelling of system solutions.
• Proven experience using multiple cyber threat intelligence feeds and turning them into actionable reports.
• Experience providing advice, guidance and assurance against standards such as NIST, ISO 27001, CIS, CAF, HMG GovS 007 and NPSA.
• Experience managing internal and external cyber security risks to IT systems, services and data storage, particularly within digital cloud services.
• Experience working across multiple projects with limited supervision and engaging senior stakeholders, customers and suppliers with strong written and verbal communication skills.
• Familiarity with tools such as Microsoft Visio, Atlassian Jira / Confluence and standard Microsoft Office applications, and a broad understanding of common enterprise IT technologies and their associated security risks.