Details:
- Salary: £55,000 - 80,000 - Annum
- Job Type: Permanent
- Job Status: Full-Time
- Salary Per: Annum
- Location: Aberdeen Aberdeen City
- Date: 2 days ago
Description:
Location: Aberdeen or Sheffield (Hybrid)
Our client, a growing engineering and technology group, is looking for an experienced Cyber Security Manager to lead cyber security, information assurance and governance across the business. This is a high-impact, Group-wide role covering corporate IT, Operational Technology (OT), cloud environments and commercial software products, giving you real scope to shape strategy and make a visible difference.
The role
* Develop and own the Group cyber security roadmap alongside the CIO and IT leadership, covering IT, OT, cloud and digital products.
* Define and maintain cyber policies, standards and governance, including the cyber risk register, risk assessments and reporting to senior stakeholders.
* Lead incident response planning with an external SOC partner, including playbooks, tabletop exercises and post-incident reviews.
* Provide security governance across IT and OT environments, improving asset visibility, segmentation, secure remote access and vulnerability management without compromising safety or availability.
* Work with Software and Firmware Engineering teams to embed security throughout the SDLC and review the security architecture of customer-facing products.
* Oversee compliance with frameworks such as ISO 27001, Cyber Essentials Plus, SOC 2, NIST CSF and IEC 62443, and coordinate internal and external audits.
* Lead supplier due diligence and support customer security questionnaires, tenders and assurance requests.
What you’ll bring
* Significant experience in a cyber security governance, assurance or leadership role.
* Experience managing ISO 27001 or an equivalent ISMS.
* Strong understanding of enterprise security architecture, secure software development and cloud security (ideally Microsoft Azure).
* Knowledge of OT / Industrial Control System security.
* Strong risk management skills and the ability to explain complex technical risks clearly to technical and non-technical audiences.
Desirable
* Experience in the energy, industrial or engineering sectors.
* Experience with Cyber Essentials Plus, SOC 2, IEC 62443 or NIS2.
* Certifications such as CISSP, CISM, or ISO 27001 Lead Auditor/Implementer.
If you want to shape cyber security across enterprise, industrial and product environments in a collaborative, Group-wide role, apply now for more information