Cybersecurity Lead

Head of Talent Acquisition at Scottish Power

Location: Scottish Power HQ, Glasgow

Employment type: Full-time

Seniority level: Mid‑senior level

Job function: Information Technology

Industries: Utilities

Job Posting End Date: January 21, 2026

Flexible & Hybrid Working

UK Government Security Clearance required.

Implement and evolve the application security model, aligning it to the Global Application Cybersecurity team, ensuring standards and best practices are fully integrated into the Software Development Lifecycle.

• Lead on vulnerability management, promote global vulnerability management processes and controls.
• Inventory logical components and dependencies of business solutions.
• Proactively discover vulnerabilities.
• Coordinate scanning, penetration testing and vulnerability identification activities.
• Conduct vulnerability assessment, remediation, mitigation and solution verification.
• Report findings and contribute to process evolution.
• Lead security assessments of commercial packages.
• Work with global teams to implement Iberdrola‑defined standards.
• Governance and oversight of secure software development standards within Scottish Power.
• Innovate and optimize cybersecurity measures.
• Lead education, training and awareness of standards.
• Implement governance and control mechanisms to ensure compliance.

• Detailed knowledge of the Secure Software Development Life Cycle (S‑SDLC).
• Knowledge of cybersecurity threats and attack techniques.
• Design knowledge: modeling of components, data, interfaces, etc.
• Threat analysis and modeling.
• Knowledge of web application security.
• Vulnerability discovery techniques and vulnerability lifecycle scanning and management.
• Knowledge of application security architecture: segmentation, API Gateway, Encryption, Privileged Account Management, WAF, publishing, event collection tools and alert management.
• Stakeholder management across multiple projects and teams.

• Competitive salary reviewed annually.
• Pension scheme: double match up to company contribution of 10%.
• 36 days annual leave, with holiday purchase options.
• Share Incentive Plan and Sharesave Scheme.
• Payroll giving and charity matched funding.
• Technology vouchers.
• Carbon emission pledge and related schemes.
• Electric Vehicle and Cycle to Work schemes.
• Optional health insurance, dental, private medical, health cash plan, annual health assessments.
• Life Assurance (4× salary).
• Financial wellbeing support.
• Shopping, leisure, restaurant and gym discounts, employee deals on travel insurance, etc.

Scottish Power is part of the Iberdrola Group, a world leader in wind energy, with a commitment to renewable resources and Net Zero. The company offers global career opportunities and invests in internal talent. Inclusion, diversity, and social purpose are core values.

Applicants not citizens may be subject to compliance with immigration requirements; the company will support necessary immigration processes.

Advert will close at 23:59 GMT the day before the posted end date (January 21, 2026).

Scottish Power is committed to providing reasonable support for candidates with disabilities, long‑term conditions, mental health conditions, neurodivergent individuals, or those needing pregnancy‑related support.

Send your application to Scottish Power. Referrals will increase your chances of interviewing.