Cyber Security Lead

The Vacancy

We currently have an exciting opportunity to join our IT department as a Cyber Security Lead, on a full time basis in our Glasgow office.

Our IT team is made up of enthusiastic and experienced IT professionals who provide innovative technology in a collaborative and supportive environment. This role sits within our IT networking and security team who are responsible for maintaining key cyber security technologies along with the underlying network infrastructure. For this role we are looking to recruit an experienced Cyber Security Lead, who would like the opportunity to expand their knowledge further in this area.

You will be responsible for managing a small team of cyber security engineers, driving new cyber security initiatives, maximising the value we get from existing cyber security technologies including our M365 tenancy and assisting with colleagues and the IT Network & Security Manager to deliver the IT business plan.

Our firm invests in the latest industry leading technologies to facilitate the delivery of our ground-breaking business solutions. We adopt integrated ways of working such as “Dev Ops” and employ Agile/Scrum methodology approach to manage our work.

• Manage, mentor, and help to develop the cyber security team.
• Using Azure Devops, set and manage the teams project related and non-service desk tasks for the upcoming year.
• Manage, or act in an advisory capacity to members of the team for all service request tickets that relate to cyber security. Ensure the team comply with agreed service desk SLA’s.
• Look to adopt and get more value from our existing Microsoft Licensing Agreement.
• Work closely with the Security Operating Centre and Networking engineers, to drive security initiatives across the wider team.
• Participate in and deliver multi-discipline/cross team projects acting as the cyber security subject matter expert.
• Act as the technical lead and escalation point for all cyber security related queries.
• Research and advise on the latest cyber security best practises and solutions, make recommendations to the business where necessary.
• Provide a key technical mentoring capability to staff, participating in knowledge transfer and training sessions (a strong technical cyber security background is required for this role.)
• Ensure cyber security platforms are actively monitored and responded to in an appropriate way.
• Make use of automation tools to drive up efficiency, where possible.
• Technical involvement in scoping, researching, vendor selection, implementation, configuration, documentation and roll out of strategic security technologies – working with industry leading vendors.
• Work with fellow team members and the IT Network & Security Manager to build strategic partnerships and relationships with key vendors and suppliers.
• Evaluate emerging technologies in the marketplace and to raise a business case for adoption where tangible benefits can be brought to the firm.
• Continuous improvement – drive through identified improvements and/or additional controls and procedures as necessary to sustain our ISO-27001 and Cyber Essentials accreditation.
• Adhere to the firm’s Information Security standards, policies and procedures ensuring that they are embedded in everything that we do. Act in advisory capacity, to external audits and due diligence questionnaires.

• Strong practical knowledge of M365 stack from a security perspective (Defender, Azure)
• Vulnerability Management
• Web Application Filtering
• DLP
• Cloudflare
• Secure File Transfer
• Firewalls
• Remote Access/VPN
• PKI Infrastructure
• DNS
• Email Gateways
• Security Audits
• ISO
  27001
• Cyber Essentials

• Azure Dev Ops (Scrum principles, Release Pipelines)
• Knowledge of Mitre Attack Framework
• Strong Networking Principals
• ITIL (Supervising Service Desk Queue)
• Strong Interest In all aspects of security
• Scripting (Power Shell, Python, Azure CLI, Yaml, etc)
• Microsoft Operating Systems (Desktop, Server)
• Exchange Online

To succeed in and enjoy this role you are likely to have a real passion for and want to develop your career further within IT Security, you will…