Cyber Security Consultant

We are recruiting for an experienced Cyber Security Consultant to oversee large-scale security projects.

Benefits

• 33 days’ annual leave  
• Flexible leave  
• Generous employee discounts  
• Private healthcare  
• Workplace pension  
• …and much more  

Working Hours

Full time: Monday – Friday 8.30am – 5pm

Location

Kilbirnie Street, Glasgow. This is a hybrid role which involves three days at home and two days in the office.

About the Role

As a Cyber Security Consultant, you’ll work closely with our third-party suppliers and internal stakeholders to ensure all project work is aligned with our standards and policies. You’ll oversee large-scale security projects and develop strategies to strengthen our security defences.

Responsibilities

• Oversee large-scale security projects involving multiple parties and teams
• Conduct comprehensive security assessments of systems, networks, and applications
• Identify vulnerabilities, weaknesses and threats in Arnold Clark’s security postures
• Develop and implement strategies to mitigate risks and strengthen security defences
• Provide expert guidance and recommendations on best practices for securing systems and data
• Assist with implementing security controls and solutions
• Stay up to date on the latest cyber security threats, trends, and technologies
• Communicate effectively with internal and external stakeholders, both verbally and in writing, to convey technical information and recommendations.
• Work collaboratively with IT teams to remediate findings identified through penetration testing
• Assist members of Cyber Security with any relevant issues that may arise
• Assist GRC team with policy and standard writing/updating

Essential skills and experience

• Minimum five years’ cyber-related experience
• Experience in stakeholder management
• Experience in coaching and mentoring fellow Cyber Security team members
• Experience in implementing solutions that meet the requirements of NIST CSF, CIS v8.0 and CE+
• Ability to work under the direction of the Security Advisory Manager
• Ability to work under pressure
• Ability to complete project documentation in line with processes
• Establish and maintain relationships with all internal stakeholders and third parties

SFIA skills profile

This role is aligned primarily to SFIA Level 5, reflecting a senior cyber security practitioner who works with broad direction, exercises professional judgement, provides authoritative advice and influences project, supplier and stakeholder decisions.

SFIA skill

Code

Target level

Application to this role

Consultancy

CNSL

5

Provides specialist cyber security advice and recommendations to projects, technical teams, business stakeholders and third-party suppliers.

Information security

SCTY

5

Ensures that security controls, project designs and implementation decisions align with Arnold Clark security policies, standards and risk appetite.

Risk management

BURM

5

Identifies, assesses and communicates cyber security risks, recommends proportionate treatment and supports informed risk decisions.

Stakeholder relationship management

RLMT

5

Builds and manages productive relationships with business stakeholders, technical teams and strategic suppliers, influencing decisions and resolving security concerns.

Information assurance

INAS

5

Assesses whether systems, services and suppliers provide appropriate protection for information and can demonstrate that required controls are operating effectively.

Specialist advice

TECH

5

Provides authoritative guidance on cyber security controls, vulnerabilities, threats, remediation and secure implementation.

Audit

AUDT

4

Conducts structured security assessments and reviews evidence to identify control weaknesses and compliance gaps.

Project management

PRMG

4

Supports and provides security oversight for complex projects involving multiple internal teams and external suppliers.