Point your AI agent at freehire and let it find you a job.

Get the CLI →

Iberdrola

NewBe an early applicant

Cyber Security Vulnerability Lead

Posted
Discussion

Summary

Lead cyber security vulnerability management at ScottishPower (Iberdrola Group) in Glasgow, hybrid 2-3 days onsite per week. Day to day you coordinate penetration testing and Red Team activity, drive vulnerability management and cyber resilience across IT and OT systems, and shape security strategy with the Global Cyber Fusion Centre.

Salary: £63,000 - 103,000 per year

Requirements:
  • We are looking for an experienced cyber security professional with a strong background in security operations within a large, complex organisation.
  • We are looking for someone who is comfortable leading security improvement programmes, managing critical vulnerabilities, and working with a range of security tools and services.
  • Experience working with OT security environments is beneficial.
  • An understanding of the regulatory and security challenges facing critical infrastructure organisations is beneficial.
  • Professional certifications such as CISSP, CISM, GICSP or OSCP would be advantageous.
  • The successful candidate must be eligible to obtain NSV SC Clearance.
  • Applicants must have lived continuously in the UK for at least five years to meet the minimum residency requirements.
Responsibilities:
  • Lead the coordination of vulnerability identification services, including penetration testing and Red Team activities.
  • Help shape the future of cyber security across the organisation by defining strategic security initiatives.
  • Influence long-term roadmaps and ensure security services deliver maximum value from existing investments.
  • Work closely with the Global Cyber Fusion Centre and teams across ScottishPower to drive vulnerability management, security testing, and cyber resilience initiatives.
  • Build strong relationships with senior stakeholders, security teams, service providers, and business leaders to deliver an integrated IT and OT security strategy.
  • Provide expert guidance on the tools, processes, and operating models that support the Cyber Fusion Centres continued evolution in the UK.
  • Support both IT and Operational Technology (OT) systems across the business.
Technologies:
  • Support
  • Security
  • ASP.NET

More:

We are ScottishPower, part of the Iberdrola Group, one of the worlds largest integrated utility companies and a world leader in wind energy. We are investing in a major Cyber Security Transformation Programme and this Cyber Security Vulnerability Lead role is based in Glasgow with hybrid working, 2-3 days per week, on a permanent basis. The salary starts from 59,000+, with up to 15% bonus and private healthcare. We offer a competitive benefits package including 36 days annual leave, a pension scheme with double matching up to 10% company contribution, holiday purchase, Share Incentive Plan and Sharesave Scheme, payroll giving and charity matched funding, technology vouchers, electric vehicle schemes, cycle to work and public transport season ticket loans, options to purchase dental and private medical insurance, health cash plan and annual health assessments, life assurance, financial wellbeing support, and shopping, leisure, restaurant and gym discounts. We are committed to renewable energy, Net Zero, inclusion, diversity, and social purpose, and we support reasonable adjustments in our recruitment process.

last updated 36 week of 2026

See also

Security jobs by country — openings, pay and top skills →

Tailor your CV for this role?

We couldn't check your fit for this role — add a CV to your profile to see it next time.

A new version of freehire is available