Security testing programme analyst

Morson Group; Glasgow; Hybrid; GBP 50,000 - 70,000; Full time

Benefits offered by this job

Hybrid role

Umbrella or PAYE rate

12-month contract

Glasgow HQ

Job summary

SP Energy Networks (SPEN) has kicked off an ambitious security transformation programme to transparently reduce risk, achieve compliance with NIS regulations and deliver a cyber resilient business, and the OT Security Testing Programme Analyst will be essential in achieving our goals. This Glasgow-based hybrid role is offered on an initial 12-month contract with a competitive umbrella or PAYE rate.

The role involves coordinating testing schedules, engaging with asset owners and suppliers, and

Qualifications

• Coordinate the annual OT security testing schedule across in-scope assets and systems using a risk-based approach.
• Engage with asset owners, engineers, project teams and suppliers to define scope, objectives and timelines.
• Support planning and delivery of penetration tests, vulnerability assessments and configuration reviews.
• Track remediation of findings through to closure and document risk exposure.
• Produce regular programme reports, metrics and management updates.

Responsibilities

• Coordinate the annual OT security testing schedule, ensuring appropriate coverage of in-scope assets and systems and driving the schedule using a risk-based approach.
• Engage with asset owners, engineers, project teams, and suppliers to define testing scope, objectives, timelines, and success criteria.
• Support the planning and delivery of penetration tests, vulnerability assessments, configuration reviews, and security assurance activities.
• Track and monitor the remediation of findings through to closure, ensuring risks are appropriately managed and documented.
• Produce regular programme reports, metrics, KPIs, and management updates highlighting testing status, vulnerabilities, remediation progress, and risk exposure.

Skills

Programme coordination

Project coordination

Vulnerability management

Penetration testing lifecycle

Reports and dashboards

Stakeholder engagement

Job description

Role

Security testing programme analyst – SP Energy Networks

Summary

• Hybrid Role


• Competitive rate umbrella or PAYE


• Initial 12-month contract


• Glasgow HQ

SP Energy Networks (SPEN) has kicked off an ambitious security transformation programme to transparently reduce risk, achieve compliance with NIS regulations and deliver a cyber resilient business, and the OT Security Testing Programme Analyst will be essential in achieving our goals

Expectations

• Coordinate the annual OT security testing schedule, ensuring appropriate coverage of in-scope assets and systems and driving the schedule using a risk-based approach.


• Engage with asset owners, engineers, project teams, and suppliers to define testing scope, objectives, timelines, and success criteria.


• Support the planning and delivery of penetration tests, vulnerability assessments, configuration reviews, and security assurance activities.


• Track and monitor the remediation of findings through to closure, ensuring risks are appropriately managed and documented.


• Produce regular programme reports, metrics, KPIs, and management updates highlighting testing status, vulnerabilities, remediation progress, and risk exposure.

Requirements

• Experience coordinating programmes in a high paced environment (ideally in a cyber security, vulnerability management, or assurance activities within IT and/or OT environments but transferrable experience also welcomed).


• Strong project coordination and organisational skills with the ability to manage multiple activities simultaneously.


• Understanding of vulnerability management, remediation processes, and penetration testing lifecycles.


• Knowledge of OT/ICS environments and associated cyber security risks.


• Experience producing management reports, dashboards, and programme status updates.