Cyber Security Specialist

Location: Inverness

About the job you’re considering

Location:

Secure Room, Inverness (On-site)

Working Hours:

Mon
-Fri 9.00am - 5.30pmThe Security TDA, Governance Risk, Compliance and Vulnerability Assessment Lead is responsible for leading governance, risk, compliance, vulnerability management assessment, and security design assurance across a complex, multi-technology environment. The role combines GRC operational leadership with cyber technical design, ensuring security-by-design aligned to ISO 27001, Cyber Essentials Plus and architecture standards.

Your role

Key Responsibilities Security Architecture & Cyber TDA Leadership Act as Cyber Technical Design Authority (TDA) for the account

Review and approve solution architectures

Define security reference architectures and patterns

Lead design governance forums

Provide security design sign-off and manage exceptions

Embed security-by-design in all solutions

Advise on IDAM, network, cloud and infrastructure security

Governance, Risk & Compliance (GRC)
Develop and maintain security policies aligned to ISO 27001 and Cyber Essentials Plus Manage Security Risk Register, controls, RACI and RBAC model

Lead risk identification, assessment, treatment and reporting

Support audits and assurance activities

Contribute to Disaster Recovery, Business Continuity and security incident management, covering tracking, remediation, RCA, and reporting

Conduct assurance activities to validate control effectiveness

Produce regular reporting packs covering risk, compliance, audits, and incidents

Provide and update relevant Security Training material for account personnel.

Vulnerability Management Review and triage vulnerability scans and penetration test reports

Prioritise vulnerabilities based on risk, impact, and contractual obligations

Coordinate remediation across technical teams, ensuring clear ownership and timely closure

Track vulnerabilities to distinguish new vs. existing issues

Provide remediation guidance and consultancy to stakeholders

Deliver reporting on remediation progress for internal and client consumption

Your skills and experience

Your skills and experience

Skills & Experience Strong GRC and risk management experience

Familiarity with ISO
27001, GDPR, NIST, and ITILExperience as Security Architect or TDAKnowledge of Zero Trust and cloud security

Strong stakeholder communication skills

Ability to work in a secure, restricted-access environment

Additional Requirements Based on-site in the Highlands Eligibility for BPSS security clearance

We are a Disability Confident Employer Capgemini is proud to be a Disability Confident Employer (Level
2) under the UK Government’s Disability Confident scheme. As part of our commitment to inclusive recruitment, we will offer an interview to all candidates who:

Declare they have a disability, andMeet the minimum essential criteria for the role.

Please opt in during the application process.

Baseline Personnel Security Standard (BPSS)
To be successfully appointed to this role you will need to undergo Baseline Personnel Security Standard checks. There are no nationality or residency restrictions, although if you have resided outside of the UK within the last 3 years, further checks may be required. There are other criteria and check required for BPSS, and throughout the recruitment process, you will be asked questions about your security clearance eligibility such as, but not limited to, country of residence and nationality.

Make it real – what does it mean for you?

Flexibility to work your wayYou will be encouraged to have a positive work-life balance. Our hybrid-first way of working means we embed hybrid working in all that we do and make flexible working arrangements the day-to-day reality for our people. All UK employees are eligible to request flexible working arrangements.

Your wellbeing

You’d be joining an accredited Great Place to work for Wellbeing in 2024. Employee wellbeing is vitally important to us as an organisation. We see a healthy and happy workforce a critical component for us to achieve our organisational ambitions.

To help support wellbeing we have trained ‘Mental Health Champions’ across each of our business areas, and we have invested in wellbeing apps…