Security testing programme analyst

Role

Security testing programme analyst – SP Energy Networks

• Hybrid Role
• Competitive rate umbrella or PAYE
• Initial 12-month contract
• Glasgow HQ

SP Energy Networks (SPEN) has kicked off an ambitious security transformation programme to transparently reduce risk, achieve compliance with NIS regulations and deliver a cyber resilient business, and the OT Security Testing Programme Analyst will be essential in achieving our goals

• Coordinate the annual OT security testing schedule, ensuring appropriate coverage of in-scope assets and systems and driving the schedule using a risk-based approach.
• Engage with asset owners, engineers, project teams, and suppliers to define testing scope, objectives, timelines, and success criteria.
• Support the planning and delivery of penetration tests, vulnerability assessments, configuration reviews, and security assurance activities.
• Track and monitor the remediation of findings through to closure, ensuring risks are appropriately managed and documented.
• Produce regular programme reports, metrics, KPIs, and management updates highlighting testing status, vulnerabilities, remediation progress, and risk exposure.

• Experience coordinating programmes in a high paced environment (ideally in a cyber security, vulnerability management, or assurance activities within IT and/or OT environments but transferrable experience also welcomed).
• Strong project coordination and organisational skills with the ability to manage multiple activities simultaneously.
• Understanding of vulnerability management, remediation processes, and penetration testing life cycles.
• Knowledge of OT/ICS environments and associated cyber security risks.
• Experience producing management reports, dashboards, and programme status updates.