Cyber Security Consultant

In this role you will oversee large-scale security initiatives and guide security strategy across projects with internal teams and third-party partners. You will translate security standards into actionable guidance, assess systems and networks, and drive risk mitigation. You’ll collaborate with IT, engage stakeholders, and stay ahead of threats to strengthen defenses. This position offers hybrid work in Glasgow and a chance to impact security posture at scale.

• 33 days’ annual leave
• Flexible leave
• Private healthcare
• Workplace pension
• Hybrid work (three days home, two days in office)
• Employee discounts

• Oversee large-scale security projects involving multiple parties and teams
• Conduct comprehensive security assessments of systems, networks, and applications
• Identify vulnerabilities, weaknesses and threats in Arnold Clark’s security postures
• Develop and implement strategies to mitigate risks and strengthen security defences
• Provide expert guidance and recommendations on best practices for securing systems and data
• Assist with implementing security controls and solutions
• Stay up to date on the latest cyber security threats, trends, and technologies
• Communicate effectively with internal and external stakeholders, both verbally and in writing, to convey technical information and recommendations
• Work collaboratively with IT teams to remediate findings identified through penetration testing
• Assist members of Cyber Security with any relevant issues that may arise
• Assist GRC team with policy and standard writing/updating

• Minimum five years’ cyber-related experience
• Experience in stakeholder management
• Experience in coaching and mentoring fellow Cyber Security team members
• Experience in implementing solutions that meet the requirements of NIST CSF, CIS v8.0 and CE+
• Ability to work under the direction of the Security Advisory Manager
• Ability to work under pressure
• Ability to complete project documentation in line with processes
• Establish and maintain relationships with all internal stakeholders and third parties

• Stakeholder management
• Coaching and mentoring
• Clear written and verbal communication
• NIST CSF
• CIS v8.0
• CE+ (Cybersecurity Excellence+)