Cyber Security Vulnerability Lead

Overview

In this role you will lead vulnerability management within ScottishPower’s Cyber Security Transformation Programme, spanning IT and OT. You’ll drive security testing, vulnerability identification, and resilience initiatives, while shaping strategic initiatives and roadmaps. You will partner with the Global Cyber Fusion Centre and senior stakeholders to deliver integrated security across IT/OT and influence future security services. This is a high-impact role focused on protecting critical infrastructure and advancing cyber maturity.

Pay / Benefits

• 36 days annual leave
• Pension scheme with company match up to 10%
• Private medical insurance
• Life assurance (4x salary)
• Electric Vehicle Scheme
• Cycle to Work scheme

Responsibilities

• Coordinate vulnerability identification services including penetration testing and Red Team activities
• Drive vulnerability management and cyber resilience initiatives across IT and OT
• Shape security initiatives and long-term roadmaps to maximise value from investments
• Build relationships with senior stakeholders, security teams, service providers, and business leaders to deliver integrated security strategy
• Provide expert guidance on tools, processes, and operating models to evolve the Cyber Fusion Centre in the UK

Key requirements

• Experience in security operations within a large, complex organisation
• Proven track record leading security improvement programmes and managing critical vulnerabilities
• Knowledge of OT security environments and regulatory/security challenges for critical infrastructure
• Professional certifications such as CISSP, CISM, GICSP or OSCP (advantageous)
• Eligible to obtain NSV SC Clearance
• UK residency for at least five years

• Collaborative mindset
• Stakeholder engagement
• Strategic thinking
• Vulnerability management
• Penetration testing
• Red Team activities

…