We are recruiting for an experienced Cyber Security Consultant to oversee large-scale security projects.
We offer:
- 33 days’ annual leave
- Flexible leave
- Generous employee discounts
- Private healthcare
- Workplace pension
- …and much more
Hours
Full time: Monday – Friday 8.30am – 5pm
Location
Kilbirnie Street, Glasgow. This is a hybrid role which involves three days at home and two days in the office.
About the role
As a Cyber Security Consultant, you’ll work closely with our third-party suppliers and internal stakeholders to ensure all project work is aligned with our standards and policies. You’ll oversee large-scale security projects and develop strategies to strengthen our security defences.
Day-to-day duties
- Oversee large-scale security projects involving multiple parties and teams
- Conduct comprehensive security assessments of systems, networks, and applications
- Identify vulnerabilities, weaknesses and threats in Arnold Clark’s security postures
- Develop and implement strategies to mitigate risks and strengthen security defences
- Provide expert guidance and recommendations on best practices for securing systems and data
- Assist with implementing security controls and solutions
- Stay up to date on the latest cyber security threats, trends, and technologies
- Communicate effectively with internal and external stakeholders, both verbally and in writing, to convey technical information and recommendations.
- Work collaboratively with IT teams to remediate findings identified through penetration testing
- Assist members of Cyber Security with any relevant issues that may arise
- Assist GRC team with policy and standard writing/updating
Essential skills and experience
- Minimum five years’ cyber-related experience
- Experience in stakeholder management
- Experience in coaching and mentoring fellow Cyber Security team members
- Experience in implementing solutions that meet the requirements of NIST CSF, CIS v8.0 and CE+
- Ability to work under the direction of the Security Advisory Manager
- Ability to work under pressure
- Ability to complete project documentation in line with processes
- Establish and maintain relationships with all internal stakeholders and third parties
SFIA skills profile
This role is aligned primarily to SFIA Level 5, reflecting a senior cyber security practitioner who works with broad direction, exercises professional judgement, provides authoritative advice and influences project, supplier and stakeholder decisions.
|
SFIA skill
|
Code
|
Target level
|
Application to this role
|
|
Consultancy
|
CNSL
|
5
|
Provides specialist cyber security advice and recommendations to projects, technical teams, business stakeholders and third-party suppliers.
|
|
Information security
|
SCTY
|
5
|
Ensures that security controls, project designs and implementation decisions align with Arnold Clark security policies, standards and risk appetite.
|
|
Risk management
|
BURM
|
5
|
Identifies, assesses and communicates cyber security risks, recommends proportionate treatment and supports informed risk decisions.
|
|
Stakeholder relationship management
|
RLMT
|
5
|
Builds and manages productive relationships with business stakeholders, technical teams and strategic suppliers, influencing decisions and resolving security concerns.
|
|
Information assurance
|
INAS
|
5
|
Assesses whether systems, services and suppliers provide appropriate protection for information and can demonstrate that required controls are operating effectively.
|
|
Specialist advice
|
TECH
|
5
|
Provides authoritative guidance on cyber security controls, vulnerabilities, threats, remediation and secure implementation.
|
|
Audit
|
AUDT
|
4
|
Conducts structured security assessments and reviews evidence to identify control weaknesses and compliance gaps.
|
|
Project management
|
PRMG
|
4
|
Supports and provides security oversight for complex projects involving multiple internal teams and external suppliers.
|
Our Culture
Arnold Clark is committed to creating a diverse and inclusive workplace. We strive to create an environment where collaboration, unique perspectives and multiple approaches are celebrated. We care about our employees and our communities, we nurture talent and encourage ambition, and we are passionate about people who take pride in their work. Our employees are at the heart of everything we do – diverse in our make-up, united in our goals.
To find out more about Life at Arnold Clark, visit our website.
Employment within the Arnold Clark Group is offered subject to satisfactory reference and disclosure checks.