Audit & Assurance Lead

Audit & Assurance Lead

Location: Glasgow

Salary: £59-74K (plus up to 15% bonus, prvate healthcare and up to 15% pension)

Permanent, Hybrid (2-3 days in the office)

Help us create a better future, quicker

We're looking for an experienced Audit and Assurance Lead to play a pivotal role within a dynamic and ambitious global cyber security function. This position sits at the heart of ensuring cyber resilience across both Operational Technology (OT) and Information Technology (IT), contributing to the safe and reliable supply of electricity to customers.

In this role, you will be responsible for planning and delivering assurance activities, while clearly communicating outcomes and insights to senior leadership. Working closely with the Governance and Compliance Manager as part of a wider Cyber Risk function, you will support all aspects of OT audit and assurance. You will support the identification and interpretation of key industry standards and regulatory requirements - particularly IEC 62443 and the Enhanced Cyber Assessment Framework - to ensure the organisation continues to reduce risk and safeguard its critical systems.

You will play a key role in developing, maintaining and evaluating security policies and procedures, collaborating with engineering and operations teams to ensure that controls align with both internal expectations and external obligations. Alongside this, you will manage audit findings, follow up on remediation activity and contribute to continuous improvement in security practices. The role also offers the opportunity to research and apply emerging techniques and engage across industries to bring best practice into the organisation.

As part of a broader security transformation programme running through to 2027, you will support efforts to reduce risk, achieve compliance with NIS regulations and strengthen overall cyber resilience. Your work will directly contribute to shaping a more secure and forward-looking organisation.

This role will involve consulting with senior stakeholders to provide guidance on risk management, security controls and compliance. You will plan assurance activities based on organisational risk and strategic priorities, assess the effectiveness of key controls and provide independent reporting on the organisation's risk posture. You will also contribute to performance reporting through KPIs, KRIs and KCIs, monitor changes in the regulatory and threat landscape, and ensure risk assessments are conducted in line with defined methodologies.

Working within established governance frameworks, you will support a range of risk and compliance activities, including NIS CAF reporting, risk assessments and the analysis of security requirements. You will provide clear, proportionate advice to stakeholders, helping them make informed decisions and validating the effectiveness of risk mitigation measures across the business.

The ideal candidate will bring strong expertise in IT and OT environments, with a deep technical understanding of how controls are designed and operate in practice. Experience with in assurance or internal audit functions, along with familiarity with industry frameworks and standards, will be key. You will be comfortable operating at both a strategic and tactical level, building relationships across global teams and communicating complex ideas in a clear and accessible way.

This is an opportunity to join a forward-thinking organisation undergoing significant transformation, where your expertise will have a tangible impact on security, compliance and operational resilience.

As well as a competitive salary which is reviewed annually, you can also enjoy a number of other benefits. With our pension scheme, we'll double match your contribution up to a company contribution of 10%.

At Scottish Power, we believe it's the little things we do in life that make a big difference. From helping you look after your family's wellbeing, save for your future and take personal steps for climate action - our benefits are designed to help you do just that - so that you have everything you need to take care of your world…