Top IT Jobs in Glasgow

Lead cyber risk management for onshore and offshore IT and OT environments, develop and implement risk frameworks, oversee full risk lifecycle, ensure NIS compliance, assess controls, review incidents, report exposure, and influence senior stakeholders to embed risk culture across the organisation and supply chain.

Lead the full cyber incident lifecycle across IT and OT: detection, investigation, containment, eradication, recovery and post-incident improvement. Coordinate multidisciplinary teams, manage MSSP and vendor relationships, ensure threat intelligence informs detection, run exercises and scenario planning, represent Cyber Operations in governance and executive reporting, and drive measurable resilience improvements. Ability to achieve SC clearance required.

Plan and execute IT control testing across Technology, Cyber, Data and Change; document findings, manage risks and issues in AuditBoard, support remediation tracking, and contribute to risk reporting and governance to meet regulatory expectations.

Lead and execute integrated IT audits and examinations for insurance clients, managing project plans, teams, budgets, deliverables, and client communications. Assess information systems risks and controls, perform security and compliance testing (SOX, MAR, SOC), support business development, mentor staff, and deliver high-quality audit reports and training. Occasional travel required.

Act as the technical expert through the sales cycle: run discovery calls and workshops, design Microsoft/Azure-based infrastructure and cyber resilience solutions, produce technical documentation and SOWs, lead RFP responses, present business value to customers, and coordinate handover to delivery teams.

Lead IT risk assessments, evaluate and document inherent and residual risks, partner with stakeholders to develop and monitor risk response plans, support enterprise IT risk and cyber security initiatives, maintain risk management procedures and best practices, and communicate risks across ITS and business units.

Lead IT GRC programs to maintain compliance and certification readiness, coordinate ITGC audit requests and remediation, design and implement risk-mitigating controls (including IAM), define KPIs, and report compliance status while partnering with InfoSec and IT Operations.

Manage end-to-end Joiners, Movers, and Leavers (JML) processes to provision, modify, and remove access following least-privilege and RBAC principles. Maintain auditable access records, ensure approvals, liaise with data owners and stakeholders, support audits, document SOPs, and identify process automation and improvement opportunities while collaborating with HR, IT Security, Service Desk, and third parties.