Current jobs related to Cyber Security Risk Assessment Specialist - Glasgow, Glasgow City - Ashurst


  • Glasgow, Glasgow City, United Kingdom Identifi Global Resources Limited Full time

    Cyber Security Governance SpecialistAt Identifi Global Resources Limited, we are seeking a highly skilled Cyber Security Governance Specialist to join our team. The successful candidate will be responsible for designing, implementing, and enhancing governance frameworks tailored to our clients' needs, incorporating industry best practices and regulatory...


  • Glasgow, Glasgow City, United Kingdom Be-IT Full time

    Cyber Security Risk Manager:We are seeking a Cyber Security Risk Manager to join our team at Be-IT. As a key member of our security team, you will be responsible for protecting our clients from cyber threats by managing risk, developing mitigation plans, and providing leadership with independent assurance of our cybersecurity posture.Your role will involve...


  • Glasgow, Glasgow City, United Kingdom EDF Full time

    About the RoleWe are seeking highly skilled Cyber Security Specialists to join our growing team at EDF Nuclear Services. As a Cyber Security Specialist, you will play a critical role in ensuring the security and integrity of our nuclear power stations and new nuclear projects.Key ResponsibilitiesConduct risk assessments and develop mitigation strategies to...


  • Glasgow, Glasgow City, United Kingdom EDF Full time

    About the RoleWe are seeking highly skilled Cyber Security Specialists to join our growing team at EDF Nuclear Services. As a Cyber Security Specialist, you will play a critical role in ensuring the security and integrity of our nuclear power stations and new nuclear projects.Key ResponsibilitiesConduct risk assessments and develop mitigation strategies to...


  • Glasgow, Glasgow City, United Kingdom Head Resourcing Full time

    Job Summary:Head Resourcing is pleased to be working with a large financial services client to assist them in hiring a talented Cyber Security Risk Specialist. Our client offers an exceptional place to work, with remote working and a market leading benefits package.This role will contribute to the development, maintenance, and overall delivery of Cyber...


  • Glasgow, Glasgow City, United Kingdom Be-IT Full time £75,000

    Cyber Risk & Information Security ManagerAbout the Role:We are seeking a highly skilled Cyber Risk & Information Security Manager to join our team at Be-IT. As a key member of our security team, you will be responsible for protecting our clients from cyber threats by managing risk, developing mitigation plans, and providing leadership with independent...


  • Glasgow, Glasgow City, United Kingdom Be-IT Full time £75,000

    Cyber Risk & Information Security ManagerAbout the Role:We are seeking a highly skilled Cyber Risk & Information Security Manager to join our team at Be-IT. As a key member of our security team, you will be responsible for protecting our clients from cyber threats by managing risk, developing mitigation plans, and providing leadership with independent...


  • Glasgow, Glasgow City, United Kingdom Head Resourcing Full time

    Job Title: Cyber Security AnalystJob Summary:We are seeking a highly skilled Cyber Security Analyst to join our team at Head Resourcing. As a Cyber Security Analyst, you will be responsible for operating and managing our clients' Vulnerability Management, Pen Testing, and SDLC security controls.Key Responsibilities:Conduct vulnerability assessments and...


  • Glasgow, Glasgow City, United Kingdom Head Resourcing Full time

    Job Title: Cyber Security AnalystJob Summary:We are seeking a highly skilled Cyber Security Analyst to join our team at Head Resourcing. As a Cyber Security Analyst, you will be responsible for operating and managing our clients' Vulnerability Management, Pen Testing, and SDLC security controls.Key Responsibilities:Conduct vulnerability assessments and...


  • Glasgow, Glasgow City, United Kingdom ENGINEERINGUK Full time

    Job Title: Cyber Security SpecialistJob Summary:We are seeking a highly skilled Cyber Security Specialist to join our team. As a Cyber Security Specialist, you will be responsible for designing and implementing secure system architectures, protecting our clients' business systems and data.Key Responsibilities:Design and implement secure system architectures...


  • Glasgow, Glasgow City, United Kingdom ENGINEERINGUK Full time

    Job Title: Cyber Security SpecialistJob Summary:We are seeking a highly skilled Cyber Security Specialist to join our team. As a Cyber Security Specialist, you will be responsible for designing and implementing secure system architectures, protecting our clients' business systems and data.Key Responsibilities:Design and implement secure system architectures...


  • Glasgow, Glasgow City, United Kingdom EDF Full time

    Exciting Opportunities in Cyber Security & AssuranceWe are seeking highly skilled professionals to join our growing Cyber Security & Assurance Information Branch within Nuclear Services at EDF. As a leading player in the nuclear industry, we are committed to delivering exceptional services and ensuring the safety and security of our operations.Key...


  • Glasgow, Glasgow City, United Kingdom EDF Full time

    Exciting Opportunities in Cyber Security & AssuranceWe are seeking highly skilled professionals to join our growing Cyber Security & Assurance Information Branch within Nuclear Services at EDF. As a leading player in the nuclear industry, we are committed to delivering exceptional services and ensuring the safety and security of our operations.Key...


  • Glasgow, Glasgow City, United Kingdom Thales Full time

    Cyber Security EngineerThales is a leading provider of digital security solutions, and we are seeking a highly skilled Cyber Security Engineer to join our team. As a Cyber Security Engineer, you will play a critical role in designing and implementing secure systems and solutions that meet the needs of our customers.Key Responsibilities:Develop and implement...


  • Glasgow, Glasgow City, United Kingdom Thales Full time

    Cyber Security EngineerThales is a leading provider of digital security solutions, and we are seeking a highly skilled Cyber Security Engineer to join our team. As a Cyber Security Engineer, you will play a critical role in designing and implementing secure systems and solutions that meet the needs of our customers.Key Responsibilities:Develop and implement...


  • Glasgow, Glasgow City, United Kingdom EDF Full time

    About the RoleWe are seeking highly skilled Cyber Security Specialists to join our growing Cyber Security & Assurance Information Branch within Nuclear Services at EDF.This is an exciting opportunity to be part of a dynamic team that supports every stage of nuclear projects, including Hinkley Point C and Sizewell C, as well as our existing power stations and...


  • Glasgow, Glasgow City, United Kingdom identifi Global Resources Full time £65,000 - £70,000

    Cyber Security Governance SpecialistPermanent, full-time role offering £65,000 - £70,000Location: Glasgow Area, hybrid with visits to secured site 2-3 days a weekMust have current/active SC or DV clearanceBritish National needed due to security requirementsAbout the OpportunityWe're working with our cyber security client who provide expertise and solutions...

  • Cyber Risk Manager

    2 weeks ago


    Glasgow, Glasgow City, United Kingdom Cbes Full time

    Job Title: Cyber Risk ManagerCbes is seeking a highly skilled Cyber Risk Manager to join our team. As a key member of our Information Security department, you will be responsible for leading and supporting the business in managing cyber risk and information protection positions effectively.Key Responsibilities:Contribute to the development of the information...


  • Glasgow, Glasgow City, United Kingdom identifi Global Resources Full time £70,000

    Cyber Security Governance SpecialistWe're seeking a highly skilled Cyber Security Governance Specialist to join our team at identifi Global Resources. As a Senior GRC Consultant, you will be instrumental in establishing and maintaining robust governance frameworks and processes for our cyber security client, who provide expertise and solutions to military...


  • Glasgow, Glasgow City, United Kingdom Waterstons Limited Full time

    Join Our Cyber Security TeamWe're a leading IT and business advisory consultancy, Waterstons Limited, seeking a talented Cyber Security Specialist to join our team. Our focus is on forging long-term partnerships and delivering exceptional services to businesses across the UK and beyond.About the RoleAs a member of our Cyber Security team, you'll work closely...

Cyber Security Risk Assessment Specialist

3 months ago


Glasgow, Glasgow City, United Kingdom Ashurst Full time

About Ashurst

Department/Role Overview

The Cyber Security Vulnerability Analyst is responsible for working alongside the Global Cyber Security Operations team to address and manage requirements associated with vulnerability oversight. This role encompasses monitoring, reporting, and providing strategic guidance to assist various teams in fulfilling global vulnerability management and essential security obligations.

Key Responsibilities

  • Primary Liaison: Serve as the main point of contact for threat and vulnerability management initiatives, ensuring effective communication and collaboration with global IT and security teams to uphold compliance with international security policies.
  • Vulnerability Management Platform Operations: Oversee the management and operation of the organization's vulnerability management system. Conduct regular assessments to detect vulnerabilities within IT assets and ensure the platform is equipped with the latest updates and patches.
  • Technical and Non-Technical Guidance: Provide support to various teams in understanding and addressing identified vulnerabilities. Convert technical vulnerability information into business impact summaries for non-technical stakeholders. Aid in security evaluations, audits, and compliance assessments by supplying vulnerability data.
  • Management of Vulnerabilities: Prepare and present regular updates on the vulnerability landscape to stakeholders, highlighting critical vulnerabilities, their potential impacts, and recommended remediation actions. Stay informed on current threat intelligence and trends to offer relevant insights.
  • Performance Tracking: Monitor and report on key performance indicators (KPIs), key risk indicators (KRIs), and service level agreements (SLAs) in relation to internal policies and security requirements. Analyze metrics to evaluate the effectiveness of the vulnerability management program and implement necessary improvements.
  • Patch Management Meetings: Organize and lead regular meetings to prioritize and address vulnerability patches, collaborating with IT and business units to ensure timely remediation efforts. Maintain documentation of patching activities and their outcomes.
  • Promoting a Remediation Culture: Advocate for a proactive stance on vulnerability remediation throughout the organization. Develop and disseminate best practices for effective vulnerability management and remediation. Conduct training sessions to enhance overall security awareness.
  • Building Stakeholder Relationships: Establish and nurture effective working relationships with key stakeholders across IT, security, and business units. Foster a collaborative atmosphere to tackle security challenges and act as a trusted advisor on vulnerability management matters.
  • Quality Assurance: Implement measures to ensure the accuracy and reliability of vulnerability scanning results. Refine scanning methodologies to reduce false positives and negatives, enhancing reporting processes to deliver clear and actionable insights.
  • Risk Assessment: Evaluate and quantify the risks associated with identified vulnerabilities, prioritizing remediation efforts based on risk levels and potential impacts. Utilize risk assessment frameworks to inform decision-making.
  • Routine Vulnerability Management Activities: Conduct regular business-as-usual (BAU) tasks related to vulnerability management, ensuring all scheduled checks and maintenance activities are completed. Provide management with consistent updates on the status of vulnerability management efforts.
  • Engagement in Broader Activities: Participate in additional business-as-usual tasks as required, promoting a culture of cross-training and flexibility. There may also be occasions where involvement in project resources is necessary.
  • Adherence to Processes: Follow security, change, and operational procedures, identifying potential risks and dependencies while taking proactive measures to mitigate them.
  • Service Quality: Deliver high-quality services consistently, meeting stakeholder expectations.
  • Change Implementation: Ensure that changes to systems are executed smoothly, without adversely affecting security, services, or users.
  • Continuous Improvement: Foster a culture of ongoing improvement by identifying opportunities to streamline workflows and enhance service delivery.
  • Agile Methodologies: Demonstrate a solid understanding of Agile delivery principles and effectively prioritize and manage tasks.
  • Team Collaboration: Facilitate open communication within and across business teams to encourage collaboration and efficiently resolve issues.

Essential Skills and Experience

We seek a highly motivated individual with the following qualifications:

  • Relevant experience in Cyber Security and/or IT.
  • Proficiency in metric reporting and KPI/SLA management.
  • Experience in managing escalations to satisfactory resolutions.
  • Proven track record in delivering BAU initiatives and small internal projects using Agile methodologies.
  • Understanding of risk and risk appetite in relation to security and vulnerabilities.
  • Excellent verbal and written communication skills, with a history of establishing and maintaining effective relationships with stakeholders.
  • Strong organizational abilities and comfort in a fast-paced environment.
  • Demonstrated initiative and problem-solving capabilities.
  • Ability to remain composed under pressure, with the confidence to escalate issues or highlight risks as they arise.
  • Experience working in a global context and across multiple time zones.
  • Familiarity with tools such as Jira, Azure DevOps, ITSM platforms like Cherwell and ServiceNow, and the MS Office suite.

Desired Skills and Experience

  • Cyber Security qualifications such as CompTIA Security+ and experience with relevant vulnerability management tools like Rapid7, Qualys, Nessus, as well as SIEM, Endpoint Detection & Response, Managed Services, and Data Loss Prevention.

Background Checks

To comply with regulatory and client requirements, Ashurst will conduct appropriate vetting of staff. Upon accepting a job offer, Ashurst, in conjunction with a specialist provider, will perform professional verification and background checks. These checks are conducted only with consent and in accordance with legal and regulatory obligations.

#LI-HYBRID