Security Operations Lead - Incident Response & Compliance

Aggreko; Glasgow; On-site; GBP 85,000 - 120,000; Full time

Benefits offered by this job

Pension plan

Bonus scheme

Life Assurance

Job summary

Aggreko in Glasgow is seeking a Security Operations Team Lead to steer a global security operations function, drive incident response, and lead strategic security initiatives across the organisation.

You will manage agile teams, align with ISO27001, Cyber Essentials Plus, NIS-2 and SOX audits, and hands-on use of Palo Alto and Cortex XDR in Azure/AWS environments, with emphasis on IAM (Entra/AD) and vulnerability management.

Qualifications

• Experience leading and managing agile teams in a large global business.
• Deep understanding of security frameworks and audits (ISO27001, Cyber Essentials Plus, NIS-2, SOX).
• Hands-on with Palo Alto and Cortex XDR; strong Azure/AWS cloud awareness.
• IAM expertise with Microsoft 365 and Entra/AD Identity platforms.
• Strong vulnerability management and enterprise-level analysis.

Responsibilities

• Lead a Security Operations team, driving technical initiatives and workload management.
• Oversee incident response and ensure consistent security processes and compliance.
• Collaborate with suppliers and security forums for capacity planning and roadmaps.
• Provide technical leadership and ensure effective hand-offs across tasks.

Skills

Agile team leadership

Incident management

Security leadership

Education

ISO27001 awareness/compliance

Cyber Essentials Plus

NIS-2 compliance

SOX compliance

Tools

Palo Alto

Cortex XDR

Azure

AWS

Microsoft 365

Entra/AD Identity

Job description

Aggreko in Glasgow is seeking a Security Operations Team Lead to steer a global security operations function, drive incident response, and lead strategic security initiatives across the organisation.

You will manage agile teams, align with ISO27001, Cyber Essentials Plus, NIS-2 and SOX audits, and hands-on use of Palo Alto and Cortex XDR in Azure/AWS environments, with emphasis on IAM (Entra/AD) and vulnerability management.