LHH
Cyber Security Specialist
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Cyber Security Specialist
The Security TDA, Governance Risk, Compliance and Vulnerability Assessment Lead is responsible for leading governance, risk, compliance, vulnerability management assessment, and security design assurance across a complex, multi-technology environment. The role combines GRC operational leadership with cyber technical design, ensuring security-by-design aligned to ISO 27001, Cyber Essentials Plus and architecture standards.
Your role
Key Responsibilities
Security Architecture & Cyber TDA Leadership
- Act as Cyber Technical Design Authority (TDA) for the account
- Review and approve solution architectures
- Define security reference architectures and patterns
- Lead design governance forums
- Provide security design sign-off and manage exceptions
- Embed security-by-design in all solutions
- Advise on IDAM, network, cloud and infrastructure security
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Governance, Risk & Compliance (GRC)
- Develop and maintain security policies aligned to ISO 27001 and Cyber Essentials Plus
- Manage Security Risk Register, controls, RACI and RBAC model
- Lead risk identification, assessment, treatment and reporting
- Support audits and assurance activities
- Contribute to Disaster Recovery, Business Continuity and security incident management, covering tracking, remediation, RCA, and reporting
- Conduct assurance activities to validate control effectiveness
- Produce regular reporting packs covering risk, compliance, audits, and incidents
- Provide and update relevant Security Training material for account personnel.
Vulnerability Management
- Review and triage vulnerability scans and penetration test reports
- Prioritise vulnerabilities based on risk, impact, and contractual obligations
- Coordinate remediation across technical teams, ensuring clear ownership and timely closure
- Track vulnerabilities to distinguish new vs. existing issues
- Provide remediation guidance and consultancy to stakeholders
- Deliver reporting on remediation progress for internal and client consumption
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Skills & Experience
- Strong GRC and risk management experience
- Familiarity with ISO27001, GDPR, NIST, and ITIL
- Experience as Security Architect or TDA
- Knowledge of Zero Trust and cloud security
- Strong stakeholder communication skills
- Ability to work in a secure, restricted-access environment
Additional Requirements
- Based on-site in the Highlands
- Eligibility for BPSS security clearance
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills