Cyber Security Manager

Harvey Nash is delighted to be supporting our client in the recruitment of a Cyber Security Manager on a permanent, full-time basis in Glasgow (Hybrid).

This is a key appointment, responsible for supporting the IT Director in delivering the organisation's cyber security strategy while taking ownership of its overall security posture. The successful candidate will lead cyber security activities across the business, ensuring the environment remains resilient, well-governed, and aligned with recognised standards and frameworks, including NCSC guidance and ISO 27001.

Operating within a SIAM environment, you will work closely with third-party suppliers to ensure effective service delivery and governance. You will oversee incident response activities, champion secure-by-design principles, and drive continuous improvements across identity and access management, cloud security and vulnerability management.

Key Responsibilities

• Own and evolve the organisation's cyber security strategy and roadmap.
• Lead organisation-wide cyber risk management and governance activities.
• Oversee security operations and incident response, ensuring the organisation is prepared to respond to emerging threats.
• Drive secure-by-design principles across digital, technology, and transformation programmes.
• Enhance capabilities across identity and access management (IAM), cloud security, and vulnerability management.
• Provide strategic cyber security advice to senior stakeholders, influencing decision-making across the organisation.
• Ensure compliance with relevant regulatory requirements, industry standards, and recognised security frameworks.

I am keen to speak with candidates who can demonstrate:

• Blend of technical expertise and strategic leadership.
• Strong knowledge of cyber security frameworks and standards, including NCSC guidance and ISO 27001.
• Experience operating within a multi-supplier or SIAM environment.
• A track record of managing third-party security providers
• Expertise across cloud security, identity and access management and vulnerability management.
• Strong stakeholder management skills, with experience engaging and influencing senior leaders.
• The ability to translate technical risks into clear business impacts and outcomes.

If you're interested in learning more about this opportunity, please apply with your most up-to-date CV for consideration and shortlisting.