IT Security Lead

Overview

Location: Glasgow – hybrid working

Salary: £58-72K (plus up to 15% bonus, single healthcare)

Permanent, Full Time, Hybrid Working

Help Scottish Power create a better future, quicker

Joining ScottishPower as an IT Security Lead, you will be responsible for analysing and assessing the security posture associated with existing infrastructure services and assets, identifying and supporting improvement plans to increase the security posture to expected levels. You will work closely with Architecture to explore the market for potential new security solutions to be deployed by the wider Technology, Platforms, Operations, and Cloud team. Additionally, you will support the IT Security Manager in defining and delivering initiatives related to the Global IT Security Plan.

This role ensures that all infrastructure services are secure by design and compliant with relevant external security regulations and legislation, including relevant Iberdrola group standards.

What you’ll be doing

You will provide security design input to the UK IT Technology, Platforms, Operations, and Cloud (TPOC) function to ensure that security is embedded by default in all TPO services.

Responsibilities include but are not limited to:

• Provide expert input into the TPOC infrastructure security strategy based on a comprehensive assessment of the current versus target position.
• Provide a cost input to the annual planning process to ensure change is delivered.
• Assess emerging threats and risks associated with infrastructure tools and services by performing security risk assessments.
• Support strategies for delivering a set of technical security standards and enhancing security controls.
• Provide recommendations and expert input on the global definition of strategy, standards, and procedures relating to TPOC infrastructure security.
• Support pentesting efforts affecting IT assets.
• Assess risks and approve software for installation on IT assets.

What Scottish Power’re looking for

Scottish Power is looking for applicants with detailed technical knowledge of IT security and proven security risk management capability, including the development, recommendation, and delivery of security remediation plans. Relevant industry qualifications (e.g., CISSP or CISM) are desirable.

You'll have experience in assessing emerging threats, identifying associated risk remediation activities, and supporting the development and delivery of IT infrastructure security strategies. Significant experience assessing technical designs across multiple IT disciplines and defining appropriate security controls is beneficial. Awareness of key legislation and regulation impacting IT security delivery is essential.

You will be confident in contributing to IT security strategies and articulating these to be understood by all stakeholders. A strategic thinker who can act tactically when needed, with excellent communication skills to distil technical issues for non-technical senior management stakeholders. You will be proactive, adaptable, and flexible in the face of changing business landscapes.

What’s in it for you

In addition to a competitive salary, which is reviewed annually, you can enjoy a range of benefits. Scottish Power's pension scheme will double match your contributions up to a company contribution of 10%.

At ScottishPower, Scottish Power believe the little things Scottish Power do in life make a big difference. Scottish Power's benefits are designed to help you take care of your world today and tomorrow, including:

• 36 days annual leave.
• Holiday purchase – perfect your work/life balance with extra annual leave.
• Share Incentive Plan and Sharesave Scheme.
• Payroll giving and charity matched funding.
• Technology Vouchers – save more and spread the cost of your technology purchases.
• Count Scottish Power in – pledge to reduce carbon emissions and help fight climate change.
• Electric Vehicle Schemes – to help you transition to green/clean driving.
• Cycle to Work scheme and public transport season ticket loans.
• Options to purchase dental insurance, private medical insurance, health cash plan, and annual health assessments.
• Life Assurance (4x salary).
• Access to ‘nudge’ financial wellbeing support.
• Plus shopping, leisure, restaurant, and gym discounts, and unique employee deals on travel insurance and more.

Why ScottishPower

ScottishPower is part of the Iberdrola Group, one of the world’s largest integrated utility companies and a world leader in wind energy. With a commitment to generating all Scottish Power's energy from renewable resources and a drive to create the energy infrastructure of the future, Scottish Power’re at the forefront of the journey to Net Zero. Scottish Power is investing over £6m every working day to make this happen. With diverse opportunities across Scottish Power's businesses and a commitment to invest in Scottish Power's internal talent, ScottishPower offers career opportunities that align with personal and professional goals, within a global organization.

Inclusion, diversity, and social purpose are at the heart of everything Scottish Power do. Together with Scottish Power's values, they bring Scottish Power together into a stronger, more sustainable business with direct links to the communities Scottish Power serve. It takes all kinds of people to build a large-scale business like ours, so whatever your background, you’ll fit right in.

ScottishPower is committed to providing reasonable support or adjustments in Scottish Power's recruiting processes for candidates with disabilities, long-term conditions, mental health conditions, or those who are neurodivergent or require pregnancy-related support.

Mobility

Please note that any applicant who is not a citizen of the country of the vacancy will be subject to compliance with the applicable immigration requirements to legally work in that country. If/when required, the Company will support the employee with the necessary immigration requirements.

IMPORTANT

Advert will close at 23:59 GMT the day before Job Posting End Date.