Third Party Cyber Risk Manager

Jersey Electricity Plc; Glasgow; Hybrid; GBP 57,000 - 72,000; Full time

Job summary

An energy company is seeking a Third-Party Cyber Risk Manager in Glasgow to lead cyber risk management across their supply chain. Key duties include identifying and mitigating risks while developing a team. Ideal candidates will have deep expertise in cybersecurity governance and relevant frameworks. This position offers hybrid working and competitive benefits, including a salary of £57-72K plus bonuses.

Benefits

36 days annual leave

Holiday purchase options

Share Incentive Plan

Technology Vouchers

Electric Vehicle Schemes

Cycle to Work scheme

Qualifications

• Deep expertise in cyber governance and supply chain security.
• Strong grasp of NIST SP 800-161, ISO/IEC 27036, and ISO 28000 frameworks.
• Ability to interpret legal clauses and manage risk governance.

Responsibilities

• Identify, assess, and mitigate third-party cyber risks.
• Implementation of methodologies for risk processes across SP Corporate.
• Guide a Third-Party Cyber Risk Analyst.

Skills

Cyber governance expertise

Supply chain security

Risk communication

Education

Relevant degree in Cyber Security or related field

Job description

Third-Party Cyber Risk Manager

Location Glasgow

Salary: £57-72K (plus up to 15% bonus and single healthcare cover)

Permanent, Hybrid Working

Help us create a better future, quicker

ScottishPower is seeking a dedicated and experienced Third-Party Cyber Risk Manager to join our dynamic global cyber security function. This pivotal role is at the forefront of protecting our organisation from cyber threats originating within our supply chain. You'll be responsible for identifying, assessing, and mitigating third-party cyber risks, ensuring the integrity, confidentiality, and availability of our operations.

What you'll be doing

As the owner of third-party cyber risk processes across SP Corporate, you'll ensure full implementation of Iberdrola and ScottishPower methodologies. You'll play a key role in our ambitious security transformation programme, which is already underway and set to deliver through to 2027—driving compliance with NIS regulations and building a cyber-resilient business.

This is a leadership role with line management responsibility for a Third-Party Cyber Risk Analyst. You'll guide and develop your team while collaborating with internal and external stakeholders, including legal, IT, and global cyber teams, to embed best practices and deliver strategic security solutions.

What you'll bring

You'll bring deep expertise in cyber governance and supply chain security, with a strong grasp of frameworks like NIST SP 800-161, ISO/IEC 27036, and ISO 28000. Your ability to interpret legal clauses, manage risk governance, and communicate effectively with both technical and non-technical audiences will be key to your success.

If you're passionate about cyber security, thrive in a collaborative environment, and are ready to make a tangible impact on the resilience of critical infrastructure, we'd love to hear from you.

What's in it for you

As well as a competitive salary which is reviewed annually, you can also enjoy a number of other benefits. With our pension scheme, we'll double match your contribution up to a company contribution of 10%.

At ScottishPower, we believe it's the little things we do in life that make a big difference. From helping you look after your family's wellbeing, save for your future, and take personal steps for climate action—our benefits are designed to help you do just that—so that you have everything you need to take care of your world—today and tomorrow. Our benefits include:

• 36 days annual leave

• Holiday purchase - perfect your work/life balance with extra annual leave

• Share Incentive Plan and Sharesave Scheme

• Payroll giving and charity matched funding

• Technology Vouchers - save more and spread the cost of your technology purposes

• Count us in - pledge to reduce carbon emissions and help fight climate change

• Electric Vehicle Schemes - to help you transition to green/clean driving

• Cycle to Work scheme and public transport season ticket loans

• Options to purchase dental insurance, private medical insurance, health cash plan, and annual health assessments

• Life Assurance (4x salary)

• Access to 'nudge' financial wellbeing support

• Plus shopping, leisure, restaurant and gym discounts, and unique employee deals on travel insurance and more

Why ScottishPower

ScottishPower is part of the Iberdrola Group, one of the world's largest integrated utility companies and a leader in wind energy. Committed to renewable energy and the journey to Net Zero, we invest over £6m daily to make this happen. We offer diverse career opportunities and value internal talent development.

We are committed to inclusion and diversity, supporting candidates with disabilities, long-term conditions, mental health conditions, or those who are neurodivergent or pregnant. If you need support, please contact [e-mail].