Security testing programme analyst

Summary

Hybrid Role

Competitive rate umbrella or PAYE

Initial 12-month contract

Glasgow HQ SP Energy Networks (SPEN) has kicked off an ambitious security transformation programme to transparently reduce risk, achieve compliance with NIS regulations and deliver a cyber resilient business, and the OT Security Testing Programme Analyst will be essential in achieving our goals

Expectations

• Coordinate the annual OT security testing schedule, ensuring appropriate coverage of in-scope assets and systems and driving the schedule using a risk-based approach.
• Engage with asset owners, engineers, project teams, and suppliers to define testing scope, objectives, timelines, and success criteria.
• Support the planning and delivery of penetration tests, vulnerability assessments, configuration reviews, and security assurance activities.
• Track and monitor the remediation of findings through to closure, ensuring risks are appropriately managed and documented.
• Produce regular programme reports, metrics, KPIs, and management updates highlighting testing status, vulnerabilities, remediation progress, and risk exposure.

Requirements

• Experience coordinating programmes in a high paced environment (ideally in a cyber security, vulnerability management, or assurance activities within IT and/or OT environments but transferrable experience also welcomed).
• Strong project coordination and organisational skills with the ability to manage multiple activities simultaneously.
• Understanding of vulnerability management, remediation processes, and penetration testing lifecycles.
• Knowledge of OT/ICS environments and associated cyber security risks.
• Experience producing management reports, dashboards, and programme status updates.