paisley, central scotland, united kingdom Hybrid / WFH Options
Summer-Browning Associates Ltd
supporting our Central Government client who are seeking a Cyber Security Advisor on an initial 8 contract Service Location: Glasgow (Hybrid) Essential Skills Experience of cyber security analysis and assessment, including threat identification, riskassessment, evaluation of technical controls, and assessment against industry standards Experience of engaging, advising and influencing at all levels of an organisation More ❯
milton, central scotland, united kingdom Hybrid / WFH Options
Summer-Browning Associates Ltd
supporting our Central Government client who are seeking a Cyber Security Advisor on an initial 8 contract Service Location: Glasgow (Hybrid) Essential Skills Experience of cyber security analysis and assessment, including threat identification, riskassessment, evaluation of technical controls, and assessment against industry standards Experience of engaging, advising and influencing at all levels of an organisation More ❯
will be essential, to actively go out and discover items of potential interest to the team, ensuring that there is collaboration between the architects, SOC engineers and analysts, and risk managers to deliver a documented risk-based response to the present and future of anything that may be found. Main responsibilities Your day-to-day role will involve … the need to: Working with the Security Leadership team to develop a strategic road map for an effective vulnerability detection, assessment, remediation, and threat intelligence program. Line management of the threat and vulnerability management team. Building sustainable relationships to champion the adoption of vulnerability and threat management, compliance, and penetration testing program across the Department. Manage the relationship with … the department's systems, networks, and applications. Recommend remediation strategies and provide advice on complex configuration changes in support of vulnerability remediation. Drive prioritisation of those vulnerabilities through a risk-based approach, to meet common organisational objectives such as regulatory compliance and audit functions. Development and maintenance of actionable key performance and risk indicators (KPI's & KRI's More ❯
Hereford, Herefordshire, England, United Kingdom Hybrid / WFH Options
QA
About SPS: Special Projects and Services Limited (SPS) is a UK-based security and risk management company founded in 1991. Operating globally, SPS provides crisis response, riskassessment, medical operations support, and project management in high-risk or complex environments. Known for its expertise in global assistance and specialist security operations, SPS was acquired by Concentric … in 2025, strengthening its position as a trusted provider of integrated risk and crisis management solutions. Overview: You will support the delivery of IT services across the UK business, assisting with technical support, device management, and ongoing tech ops projects. This role provides structured, hands-on training in IT systems administration, cyber security, and compliance, contributing to the smooth More ❯
comparable in size to the Commonwealth. • Exposure to technical configurations, technologies, and processing environments in one or more projects of similar size and complexity to BEST. • Understanding of information risk concepts and principles as a means of relating business needs to security controls. • Experience with common information security management frameworks, such as International Organization for Standardization (ISO) 2700x and … the ITIL, COBIT and National Institute of Standards and Technology (NIST) frameworks. • In-depth knowledge of riskassessment methods and technologies. • Good understanding of financial systems security requirements. • Excellent technical knowledge of mainstream operating systems and a wide range of security technologies, such as network security appliances, identity, and access management (IAM) systems, anti-malware solutions, automated policy … provisioning users of the Mosaic application. Specific Duties • Works with the BEST Team, SI, and product vendors, CTR and EOTSS to identify security requirements, using methods that may include risk and business impact assessments. Components of this activity include but are not limited to: o Providing operational support as defined by SLA requirements agreed to by the Commonwealth and More ❯
of over 140 across London, Toronto, New York and Singapore. We have achieved scale by building the best-in class surveillance tooling, where our analytics bring the front office risk mindset to the compliance function. Though we have developed in the trade surveillance arena, we have always been more than that. At heart, we are a finance focused big … s leading financial markets analytics platform. The Role We are seeking a Head of Information Security to join our team in London and lead our cybersecurity strategy and manage risk across our corporate estate. You can expect to work closely with our Engineering and Infrastructure teams to effect change through our organisation, as well as customer facing teams such … the development, implementation, and continuous improvement of information security practices across all teams Manage regular pentests by external consultants and coordinate with internal resources to remediate issues Information security riskassessment of third party service providers Offer guidance, direction and approval on security solutions and approaches Advocate for secure engineering best practices throughout the company Manage the standards More ❯
organisations navigate complex business challenges with confidence. With a strong presence in the UK, we partner with companies across industries to deliver best-in-class advisory services in accounting, risk, cyber security, technology, and business transformation. We pride ourselves on combining technical expertise with a practical, hands-on approach, helping our clients strengthen resilience, meet regulatory requirements, and stay … ahead in an increasingly digital and risk-driven landscape. Technical and Domain Experience: Conduct cybersecurity maturity and riskassessment and for clients. Practical experience implementing security controls, in areas such as MDR, IAM, Network Security, Cloud Deployments. Advise clients on cybersecurity strategy, metrics and reporting for various levels of stakeholders, including Audit Committees and Board of Directors. … Build risk management practices for clients, including policies, procedures, Risk Register, etc. Previous experience as a systems administrator, systems engineer, or security analyst. Understanding of operating system hardening principles, network design principles, and systems security. Guide clients in establishing cybersecurity policies, standards, and procedures. Manage cybersecurity training & awareness services for clients from design to implementation. Understanding of security More ❯
sensitive in nature. These include but not limited to front to back(f2b), multi-entity, multi-business area impacting initiatives. In addition these may be high budget, high change risk projects, along with multi-year duration - potentially structured as a programme with multiple project workstreams. Projects may include combination of strategic business change, regulatory, and IT components - so close … other senior members of team to help drive BOW. Contribute to IPC, EDF & Other forums - delivery and continuous improvement of the forum which ensures project delivery assurance of high risk, high profile projects in order to provide visibility and alignment across MUFG EMEA, Securities International and support the Deputy Regional Executive in achieving the EMEA/International Strategy and … individual Function Medium Term Business Plans ("MTBP").") goals. Chair the RiskAssessment Forum (RAF) and ensure the RCSA is maintained across all teams in CTO, engaging with team owners to ensure it is up to date and adequate control frameworks are in place for each sub-function. Post Blue Day 2, provide a six month warranty period More ❯
tools and technologies such as SIEM (Splunk), vulnerability management (Tenable), and PAM Strong understanding of security frameworks and standards (e.g., ISO 27001, NIST), as well as asset management and riskassessment solutions It would be a real bonus if you have: Master's degree in Computer Science, Information Security, or a related field Experience or understanding of SOC More ❯
standards and lifecycle assurance within complex embedded or control software systems. Key Responsibilities Develop a full understanding of the software and its operational environment. Produce and maintain a Software Assessment Plan in line with BS EN 50716 requirements. Evaluate the conformity of the software process and deliverables to applicable standards and assigned SIL levels. Assess the competence of project … and inspections at appropriate development phases, including witnessing of testing activities. Identify, assess, and document any non-conformities or deviations from requirements, evaluating their safety impact. Ensure that the assessment plan is implemented and that all findings are clearly documented in a Software Assessment Report. Provide an independent professional judgment on the software's fitness for purpose, including … any constraints, assumptions, or risks. Maintain thorough assessment records and provide recommendations for improvement or risk control. Key Competencies & Experience : Proven technical competence in software engineering within a safety-critical or regulated domain (e.g. rail, automotive, aerospace, medical, industrial). In-depth understanding of BS EN 50716, BS EN 50128, and/or BS EN 50657. Experience in More ❯
standards and lifecycle assurance within complex embedded or control software systems. Key Responsibilities Develop a full understanding of the software and its operational environment. Produce and maintain a Software Assessment Plan in line with BS EN 50716 requirements. Evaluate the conformity of the software process and deliverables to applicable standards and assigned SIL levels. Assess the competence of project … and inspections at appropriate development phases, including witnessing of testing activities. Identify, assess, and document any non-conformities or deviations from requirements, evaluating their safety impact. Ensure that the assessment plan is implemented and that all findings are clearly documented in a Software Assessment Report. Provide an independent professional judgment on the software’s fitness for purpose, including … any constraints, assumptions, or risks. Maintain thorough assessment records and provide recommendations for improvement or risk control. Key Competencies & Experience : Proven technical competence in software engineering within a safety-critical or regulated domain (e.g. rail, automotive, aerospace, medical, industrial). In-depth understanding of BS EN 50716, BS EN 50128, and/or BS EN 50657. Experience in More ❯
standards and lifecycle assurance within complex embedded or control software systems. Key Responsibilities Develop a full understanding of the software and its operational environment. Produce and maintain a Software Assessment Plan in line with BS EN 50716 requirements. Evaluate the conformity of the software process and deliverables to applicable standards and assigned SIL levels. Assess the competence of project … and inspections at appropriate development phases, including witnessing of testing activities. Identify, assess, and document any non-conformities or deviations from requirements, evaluating their safety impact. Ensure that the assessment plan is implemented and that all findings are clearly documented in a Software Assessment Report. Provide an independent professional judgment on the software’s fitness for purpose, including … any constraints, assumptions, or risks. Maintain thorough assessment records and provide recommendations for improvement or risk control. Key Competencies & Experience : Proven technical competence in software engineering within a safety-critical or regulated domain (e.g. rail, automotive, aerospace, medical, industrial). In-depth understanding of BS EN 50716, BS EN 50128, and/or BS EN 50657. Experience in More ❯
and report to audit management. Identify areas for improvement within Internal Audit and play a leading role on department improvement initiatives. Support and provide input into the Internal Audit riskassessment process to inform the Audit Plan. Execution of planning and testing for complex technology, information security audits and high-level reviews, including designing test strategies, audit test … understanding of regulatory requirements, eg, FRBNY, FCA. Strong IT security and technical knowledge with approximately 8 years of experience within the industry. Working experience with common security/technology risk frameworks, for instance, ISO 27000, NIST, CIS Critical Security Controls, COBIT, and IIA GTAGs. Working experience with regulatory standards/requirements (US, UK) ie, GDPR, BCBS 239, FFIEC … Working experience and/or knowledge of Security domains including Access management, Threat management, Incident response and recovery, Data protection, Vulnerability management, Monitoring and logging, Physical security, and Security risk management and governance. Working experience and/or knowledge of cloud, block chain, high volume transaction systems. Working experience and/or knowledge of application controls, input/output More ❯
program access required for the position in the future. Job responsibilities include but are not limited to the following: -Performs technical planning, system integration, verification and validation, cost and risk, and supportability and effectiveness analyses for total systems. -Analyses are performed at all levels of total system product to include: concept, design, fabrication, test, installation, operation, maintenance, and disposal. … hardware and software specifications. The selected candidate will be part of a team responsible for designing and implementing cyber security requirements and controls for advanced space systems. This includes riskassessment of the system of interest to attackers by applying risk analysis methodologies such as attack trees and cyber threads (drawn from security CONOPS) to identify vulnerabilities … Experience with DoD or IC Space Program(s) -Experience working on a multidisciplinary team -Ability and comfort to interface with all levels of employees and management -Experience with the Risk Management Framework (RMF) for both IC (ICD 503) and DoD (DoDI 8510.01) communities -Experience with COMSEC and Key Management -Knowledge of Program Protection and OPSEC -Understanding of Anti-Tamper More ❯
and the Audit & Finance Committee. Identify areas for improvement within Internal Audit and play a leading role on department improvement initiatives. Support and provide input into the Internal Audit riskassessment process to inform the Audit Plan. Support the director in strategic improvements including Continuous Auditing, Data Analytics, Development of control Dashboards, and Automated Testing Capabilities. Stand in … understanding of regulatory requirements, eg, FRBNY, FCA. Strong IT security and technical knowledge with approximately 8+ years of experience within the industry. Working experience with common security/technology risk frameworks, for instance, ISO 27000, NIST, CIS Critical Security Controls, Cloud Controls Matrix, COBIT, and IIA GTAGs. Working experience with regulatory standards/requirements (US, UK) ie, GDPR, BCBS … Working experience and/or knowledge of Security domains including Access management, Threat management, Incident response and recovery, Data protection, Vulnerability management, Monitoring and logging, Physical security, and Security risk management and governance. Working experience and/or knowledge of application controls, input/output, configuration, application controls. Confident in managing integrated and non-integrated audits, and leading other More ❯
within a team environment consisting of program management, technical, production, financial and other supporting staff. This is a career building role that provides exposure to contract management, production operations, risk and opportunity management and program management practices. The ideal candidate will have strong teambuilding skills, exhibit strong in, and possess comprehensive verbal and written communication/presentation skills. Roles … Identifies performance variances to facilitate focus and intervention on critical areas with the technical (engineering and operations) leads. Works with the program team to develop courses of action and risk mitigation strategies to address performance issues. Perform thorough project analysis through metrics reviews and predictive analysis to enhance cost, schedule and technical performance. Perform Schedule risk analyses and … degree or higher in Business Management, Industrial Engineering, Finance, Operations Management, Mathematics, Computer Science or related field 4+ years of program scheduling experience. Experience with Schedule Analytics and Schedule RiskAssessment tools. Working knowledge of EVMS guidelines and processes A current, active DoD TS/SCI with Polygraph What We Can Offer You Northrop Grumman provides a comprehensive More ❯
within a team environment consisting of program management, technical, production, financial and other supporting staff. This is a career building role that provides exposure to contract management, production operations, risk and opportunity management and program management practices. The ideal candidate will have strong teambuilding skills, exhibit strong in, and possess comprehensive verbal and written communication/presentation skills. Roles … Identifies performance variances to facilitate focus and intervention on critical areas with the technical (engineering and operations) leads. Works with the program team to develop courses of action and risk mitigation strategies to address performance issues. Perform thorough project analysis through metrics reviews and predictive analysis to enhance cost, schedule and technical performance. Perform Schedule risk analyses and … degree or higher in Business Management, Industrial Engineering, Finance, Operations Management, Mathematics, Computer Science or related field 4+ years of program scheduling experience. Experience with Schedule Analytics and Schedule RiskAssessment tools. Working knowledge of EVMS guidelines and processes A current, active DoD TS/SCI with Polygraph What We Can Offer You Northrop Grumman provides a comprehensive More ❯
within a team environment consisting of program management, technical, production, financial and other supporting staff. This is a career building role that provides exposure to contract management, production operations, risk and opportunity management and program management practices. The ideal candidate will have strong teambuilding skills, exhibit strong in, and possess comprehensive verbal and written communication/presentation skills. Roles … Identifies performance variances to facilitate focus and intervention on critical areas with the technical (engineering and operations) leads. Works with the program team to develop courses of action and risk mitigation strategies to address performance issues. Perform thorough project analysis through metrics reviews and predictive analysis to enhance cost, schedule and technical performance. Perform Schedule risk analyses and … degree or higher in Business Management, Industrial Engineering, Finance, Operations Management, Mathematics, Computer Science or related field 4+ years of program scheduling experience. Experience with Schedule Analytics and Schedule RiskAssessment tools. Working knowledge of EVMS guidelines and processes A current, active DoD TS/SCI with Polygraph What We Can Offer You Northrop Grumman provides a comprehensive More ❯
within a team environment consisting of program management, technical, production, financial and other supporting staff. This is a career building role that provides exposure to contract management, production operations, risk and opportunity management and program management practices. The ideal candidate will have strong teambuilding skills, exhibit strong in, and possess comprehensive verbal and written communication/presentation skills. Roles … Identifies performance variances to facilitate focus and intervention on critical areas with the technical (engineering and operations) leads. Works with the program team to develop courses of action and risk mitigation strategies to address performance issues. Perform thorough project analysis through metrics reviews and predictive analysis to enhance cost, schedule and technical performance. Perform Schedule risk analyses and … degree or higher in Business Management, Industrial Engineering, Finance, Operations Management, Mathematics, Computer Science or related field 4+ years of program scheduling experience. Experience with Schedule Analytics and Schedule RiskAssessment tools. Working knowledge of EVMS guidelines and processes A current, active DoD TS/SCI with Polygraph What We Can Offer You Northrop Grumman provides a comprehensive More ❯
within a team environment consisting of program management, technical, production, financial and other supporting staff. This is a career building role that provides exposure to contract management, production operations, risk and opportunity management and program management practices. The ideal candidate will have strong teambuilding skills, exhibit strong in, and possess comprehensive verbal and written communication/presentation skills. Roles … Identifies performance variances to facilitate focus and intervention on critical areas with the technical (engineering and operations) leads. Works with the program team to develop courses of action and risk mitigation strategies to address performance issues. Perform thorough project analysis through metrics reviews and predictive analysis to enhance cost, schedule and technical performance. Perform Schedule risk analyses and … degree or higher in Business Management, Industrial Engineering, Finance, Operations Management, Mathematics, Computer Science or related field 4+ years of program scheduling experience. Experience with Schedule Analytics and Schedule RiskAssessment tools. Working knowledge of EVMS guidelines and processes A current, active DoD TS/SCI with Polygraph What We Can Offer You Northrop Grumman provides a comprehensive More ❯
within a team environment consisting of program management, technical, production, financial and other supporting staff. This is a career building role that provides exposure to contract management, production operations, risk and opportunity management and program management practices. The ideal candidate will have strong teambuilding skills, exhibit strong in, and possess comprehensive verbal and written communication/presentation skills. Roles … Identifies performance variances to facilitate focus and intervention on critical areas with the technical (engineering and operations) leads. Works with the program team to develop courses of action and risk mitigation strategies to address performance issues. Perform thorough project analysis through metrics reviews and predictive analysis to enhance cost, schedule and technical performance. Perform Schedule risk analyses and … degree or higher in Business Management, Industrial Engineering, Finance, Operations Management, Mathematics, Computer Science or related field 4+ years of program scheduling experience. Experience with Schedule Analytics and Schedule RiskAssessment tools. Working knowledge of EVMS guidelines and processes A current, active DoD TS/SCI with Polygraph What We Can Offer You Northrop Grumman provides a comprehensive More ❯
within a team environment consisting of program management, technical, production, financial and other supporting staff. This is a career building role that provides exposure to contract management, production operations, risk and opportunity management and program management practices. The ideal candidate will have strong teambuilding skills, exhibit strong in, and possess comprehensive verbal and written communication/presentation skills. Roles … Identifies performance variances to facilitate focus and intervention on critical areas with the technical (engineering and operations) leads. Works with the program team to develop courses of action and risk mitigation strategies to address performance issues. Perform thorough project analysis through metrics reviews and predictive analysis to enhance cost, schedule and technical performance. Perform Schedule risk analyses and … degree or higher in Business Management, Industrial Engineering, Finance, Operations Management, Mathematics, Computer Science or related field 4+ years of program scheduling experience. Experience with Schedule Analytics and Schedule RiskAssessment tools. Working knowledge of EVMS guidelines and processes A current, active DoD TS/SCI with Polygraph What We Can Offer You Northrop Grumman provides a comprehensive More ❯
within a team environment consisting of program management, technical, production, financial and other supporting staff. This is a career building role that provides exposure to contract management, production operations, risk and opportunity management and program management practices. The ideal candidate will have strong teambuilding skills, exhibit strong in, and possess comprehensive verbal and written communication/presentation skills. Roles … Identifies performance variances to facilitate focus and intervention on critical areas with the technical (engineering and operations) leads. Works with the program team to develop courses of action and risk mitigation strategies to address performance issues. Perform thorough project analysis through metrics reviews and predictive analysis to enhance cost, schedule and technical performance. Perform Schedule risk analyses and … degree or higher in Business Management, Industrial Engineering, Finance, Operations Management, Mathematics, Computer Science or related field 4+ years of program scheduling experience. Experience with Schedule Analytics and Schedule RiskAssessment tools. Working knowledge of EVMS guidelines and processes A current, active DoD TS/SCI with Polygraph What We Can Offer You Northrop Grumman provides a comprehensive More ❯
fellow TechOps & Delivery team members and act as a consultant to cross-functional project teams. Evaluate emerging technologies and make recommendations on adoption to improve operational efficiency and security. RiskAssessment & Compliance Collaborate with information security teams to implement best practices, including hardening, patching, and threat mitigation. Ensure solutions comply with security, regulatory, and organizational standards. Qualifications & Experience More ❯
fellow TechOps & Delivery team members and act as a consultant to cross-functional project teams. Evaluate emerging technologies and make recommendations on adoption to improve operational efficiency and security. RiskAssessment & Compliance Collaborate with information security teams to implement best practices, including hardening, patching, and threat mitigation. Ensure solutions comply with security, regulatory, and organizational standards. Qualifications & Experience More ❯