SC-Cleared Cyber Security Advisor — Hybrid Glasgow

Henderson Scott; Glasgow; Hybrid; GBP 60,000 - 90,000; Full time

Job summary

Henderson Scott is seeking a Cyber Security Advisor to shape cyber security and risk decisions for government-led digital services in Glasgow. The role offers a hybrid model with three days onsite and requires active SC clearance.

I am keen to speak with candidates who have strong information risk management experience and relevant security qualifications. You will advise on digital and cloud solutions, work with delivery and governance teams, and handle information risk management, threat

Qualifications

• Experience in information risk management using NIST 800-30/37 and ISO 31000.
• Hold CISSP, CISM or CRISC qualifications.
• Experience across system, operational and strategic levels of risk with threat modelling.
• Experience turning cyber threat intelligence feeds into actionable reports.
• Advising on standards such as NIST, ISO 27001, CIS, CAF, HMG GovS 007 and NPSA.
• Managing cyber security risks to IT systems, services and data storage, especially in digital cloud services.
• Engaging senior stakeholders across multiple projects with strong written and verbal communication.
• Familiarity with Visio, Jira/Confluence and MS Office; understanding enterprise IT security risks.

Skills

Information risk management

Security qualifications

Threat modelling

Threat intelligence

Security standards

Cloud security

Stakeholder management

Jira/Confluence

Tools

Microsoft Visio

Jira

Confluence

Microsoft Office

Job description

Henderson Scott is seeking a Cyber Security Advisor to shape cyber security and risk decisions for government-led digital services in Glasgow. The role offers a hybrid model with three days onsite and requires active SC clearance.

I am keen to speak with candidates who have strong information risk management experience and relevant security qualifications. You will advise on digital and cloud solutions, work with delivery and governance teams, and handle information risk management, threat