Cyber Security Specialist

The Security TDA, Governance Risk, Compliance and Vulnerability Assessment Lead is responsible for leading governance, risk, compliance, vulnerability management assessment, and security design assurance across a complex, multi-technology environment. The role combines GRC operational leadership with cyber technical design, ensuring security-by-design aligned to ISO 27001, Cyber Essentials Plus and architecture standards., * Security Architecture & Cyber TDA Leadership

• Act as Cyber Technical Design Authority (TDA) for the account
• Review and approve solution architectures
• Define security reference architectures and patterns
• Lead design governance forums
• Provide security design sign-off and manage exceptions
• Embed security-by-design in all solutions
• Advise on IDAM, network, cloud and infrastructure security

Governance, Risk & Compliance (GRC)

• Develop and maintain security policies aligned to ISO 27001 and Cyber Essentials Plus
• Manage Security Risk Register, controls, RACI and RBAC model
• Lead risk identification, assessment, treatment and reporting
• Support audits and assurance activities
• Contribute to Disaster Recovery, Business Continuity and security incident management, covering tracking, remediation, RCA, and reporting
• Conduct assurance activities to validate control effectiveness
• Produce regular reporting packs covering risk, compliance, audits, and incidents
• Provide and update relevant Security Training material for account personnel.

Vulnerability Management

• Review and triage vulnerability scans and penetration test reports
• Prioritise vulnerabilities based on risk, impact, and contractual obligations
• Coordinate remediation across technical teams, ensuring clear ownership and timely closure
• Track vulnerabilities to distinguish new vs. existing issues
• Provide remediation guidance and consultancy to stakeholders
• Deliver reporting on remediation progress for internal and client consumption

Do you have experience in NIST standards?, * Strong GRC and risk management experience

• Familiarity with ISO27001, GDPR, NIST, and ITIL
• Experience as Security Architect or TDA
• Knowledge of Zero Trust and cloud security
• Strong stakeholder communication skills
• Ability to work in a secure, restricted-access environment

Additional Requirements

• Based on-site in the Highlands
• Eligibility for BPSS security clearance

We are a Disability Confident Employer

Capgemini is proud to be a Disability Confident Employer (Level 2) under the UK Government’s Disability Confident scheme. As part of our commitment to inclusive recruitment, we will offer an interview to all candidates who:

• Declare they have a disability, and Meet the minimum essential criteria for the role. *

Flexibility to work your way You will be encouraged to have a positive work-life balance. Our hybrid-first way of working means we embed hybrid working in all that we do and make flexible working arrangements the day-to-day reality for our people. All UK employees are eligible to request flexible working arrangements.

Your wellbeing You’d be joining an accredited Great Place to work for Wellbeing in 2024. Employee wellbeing is vitally important to us as an organisation. We see a healthy and happy workforce a critical component for us to achieve our organisational ambitions. To help support wellbeing we have trained ‘Mental Health Champions’ across each of our business areas, and we have invested in wellbeing apps such as Thrive and Peppy.

Shape your path You will be empowered to explore, innovate, and progress. You will benefit from Capgemini’s ‘learning for life’ mindset, meaning you will have countless training and development opportunities from thinktanks to hackathons, and access to 250,000 courses with numerous external certifications from AWS, Microsoft, Harvard ManageMentor, Cybersecurity qualifications and much more.

Shared energy You’ll be bringing your unique skills and perspectives to the team, inspiring and taking inspiration from your teammates as you unlock value in everything you do. You’ll be joining a professional community of experts, who have got your back and will support you, every step of the way.