Security testing programme analyst

RoleSecurity testing programme analyst – Scottish PowerSummary• Hybrid Role• Competitive rate umbrella or PAYE• Initial 12-month contract• Glasgow HQ SP Energy Networks (SPEN) has kicked off an ambitious security transformation programme to transparently reduce risk, achieve compliance with NIS regulations and deliver a cyber resilient business, and the OT Security Testing Programme Analyst will be essential in achieving our goalsExpectations• Coordinate the annual OT security testing schedule, ensuring appropriate coverage of in-scope assets and systems and driving the schedule using a risk-based approach.• Engage with asset owners, engineers, project teams, and suppliers to define testing scope, objectives, timelines, and success criteria.• Support the planning and delivery of penetration tests, vulnerability assessments, configuration reviews, and security assurance activities.• Track and monitor the remediation of findings through to closure, ensuring risks are appropriately managed and documented.• Produce regular programme reports, metrics, KPIs, and management updates highlighting testing status, vulnerabilities, remediation progress, and risk exposure.Requirements• Experience coordinating programmes in a high paced environment (ideally in a cyber security, vulnerability management, or assurance activities within IT and/or OT environments but transferrable experience also welcomed).• Strong project coordination and organisational skills with the ability to manage multiple activities simultaneously.• Understanding of vulnerability management, remediation processes, and penetration testing lifecycles.• Knowledge of OT/ICS environments and associated cyber security risks.• Experience producing management reports, dashboards, and programme status updates.