Aberdeen, Aberdeenshire, United Kingdom Hybrid/Remote Options
Orion Group
basis. The position will be based in Aberdeen and will have a 3/2 hybrid working pattern Key ResponsibilitiesRisk Assessment & Secure by Design Perform structured IT and information security risk assessments and threat modelling for new IT platforms, systems, and applications and for material changes. Provide security architecture advice (patterns, guardrails) aligned to NIST CSF/ISO … test scopes, frequency and metrics. Track high-risk deviations and risk acceptances; drive remediation and report residual risk to the CISO, CIO and business risk owners. OT/ICS Security Own the LOD2 assurance plan across OT sites against the OT security standard, deciding the order and frequency of assessments aligned to risk and risk appetite. Provide OT … security advisory in relation to OT security standards alignment across all OT sites, advocating for segmentation, zoning, secure remote access, securitymonitoring and patching controls in line with ISA/IEC 62443. Supplier & Third-Party Assurance (with Procurement) Run supplier assurance in collaboration Procurement including, pre contract due diligence, control reviews, and ongoing attestation for Suppliers More ❯
Aberdeen, City of Aberdeen, United Kingdom Hybrid/Remote Options
Orion Group
basis. The position will be based in Aberdeen and will have a 3/2 hybrid working pattern Key ResponsibilitiesRisk Assessment & Secure by Design Perform structured IT and information security risk assessments and threat modelling for new IT platforms, systems, and applications and for material changes. Provide security architecture advice (patterns, guardrails) aligned to NIST CSF/ISO … test scopes, frequency and metrics. Track high-risk deviations and risk acceptances; drive remediation and report residual risk to the CISO, CIO and business risk owners. OT/ICS Security Own the LOD2 assurance plan across OT sites against the OT security standard, deciding the order and frequency of assessments aligned to risk and risk appetite. Provide OT … security advisory in relation to OT security standards alignment across all OT sites, advocating for segmentation, zoning, secure remote access, securitymonitoring and patching controls in line with ISA/IEC 62443. Supplier & Third-Party Assurance (with Procurement) Run supplier assurance in collaboration Procurement including, pre contract due diligence, control reviews, and ongoing attestation for Suppliers More ❯
for using technology to solve business problems, working in partnership with our clients to help in achieving their goals. About the role: Lead, mentor, and develop a team of Security Analysts to ensure effective 24/7 SOC operations Act as the primary escalation point for complex security incidents, ensuring timely investigation and resolution Oversee incident response activities … coordinating with internal and external stakeholders where required Manage day-to-day SOC operations, ensuring adherence to SLAs, KPIs, and compliance requirements Drive continuous improvement in securitymonitoring, detection, and response processes Ensure effective use and optimisation of SIEM, SOAR, EDR, and other security technologies Produce and deliver regular reporting on SOC performance, incident trends, and risk … skills and experience relevant to this role: Strong knowledge of SIEM, SOAR, EDR, IDS/IPS, firewalls, and endpoint protection solutions Strong Knowledge in Incident response Familiarity with cloud security and hybrid environments Understanding of network protocols, operating systems (Windows/Linux), and common attack vectors Benefits At Sword, our core values and culture are based on caring about More ❯