Strategic Cyber Risk & Assurance Lead

SCOTTISH POWER UK PLC; Glasgow; Hybrid; GBP 66,000 - 83,000; Full time

Benefits offered by this job

36 days annual leave

Pension scheme – double match up to 10

Private medical insurance

Job summary

ScottishPower is seeking a Cyber Risk & Assurance Manager to provide independent oversight across the cyber security landscape, shaping risk management framework and ensuring effective controls in IT and OT environments. The role reports to senior stakeholders and involves regulatory interaction.

You’ll lead a team, monitor risk posture, and drive a strong risk culture while engaging with executives, auditors and industry bodies. Hybrid working from Glasgow.

Qualifications

• Experience leading cyber risk and assurance activities.
• Strong understanding of IT and OT security environments.
• Ability to influence senior stakeholders and regulators.

Responsibilities

• Shape and maintain the cyber risk management framework across IT and OT.
• Provide oversight of risk assessments, control reviews, assurance programmes and third-party cyber risk management.
• Strengthen cyber resilience and support regulatory compliance.
• Lead a team of cyber risk and assurance specialists and report to senior leadership.

Skills

Cyber risk management

Risk assessment oversight

Regulatory compliance

Stakeholder management

Job description

ScottishPower is seeking a Cyber Risk & Assurance Manager to provide independent oversight across the cyber security landscape, shaping risk management framework and ensuring effective controls in IT and OT environments. The role reports to senior stakeholders and involves regulatory interaction.

You’ll lead a team, monitor risk posture, and drive a strong risk culture while engaging with executives, auditors and industry bodies. Hybrid working from Glasgow.