Cyber Security Manager

Harvey Nash is delighted to be supporting our client in the recruitment of a Cyber Security Manager on a permanent, full-time basis in Glasgow (Hybrid).

This is a key appointment, responsible for supporting the IT Director in delivering the organisation's cyber security strategy while taking ownership of its overall security posture
. The successful candidate will lead cyber security activities across the business, ensuring the environment remains resilient, well-governed, and aligned with recognised standards and frameworks
, including NCSC guidance and ISO 2701
.

Operating within a SIAM environment
, you will work closely with third-party suppliers to ensure effective service delivery and governance
. You will oversee incident response activities
, champion secure-by-design principles
, and drive continuous improvements across identity and access management
, cloud security and vulnerability management
.

• Own and evolve the organisation's cyber security strategy and roadmap.
• Lead organisation-wide cyber risk management and governance activities.
• Oversee security operations and incident response, ensuring the organisation is prepared to respond to emerging threats.
• Drive secure-by-design principles across digital, technology, and transformation programmes.
• Enhance capabilities across identity and access management (IAM), cloud security, and vulnerability management.
• Provide strategic cyber security advice to senior stakeholders, influencing decision-making across the organisation.
• Ensure compliance with relevant regulatory requirements, industry standards, and recognised security frameworks.

I am keen to speak with candidates who can demonstrate:

• Blend of technical expertise and strategic leadership.
• Strong knowledge of cyber security frameworks and standards, including NCSC guidance and ISO 2701.
• Experience operating within a multi-supplier or SIAM environment.
• A track record of managing third-party security providers
• Expertise across cloud security, identity and access management and vulnerability management.
• Strong stakeholder management skills, with experience engaging and influencing senior leaders.
• The ability to translate technical risks into clear business impacts and outcomes.

If you're interested in learning more about this opportunity, please apply with your most up-to-date CV for consideration and shortlisting.