Cyber Security Specialist

About the job you’re consideringLocation: Secure Room, Inverness (On-site) Working Hours: Mon -Fri 9.00am - 5.30pm The Security TDA, Governance Risk, Compliance and Vulnerability Assessment

Lead is responsible for leading governance, risk, compliance, vulnerability management assessment, and security design assurance across a complex, multi-technology environment. The role combines GRC operational leadership with cyber technical design, ensuring security-by-design aligned to ISO 27001, Cyber Essentials Plus and architecture standards.Your role

Security Architecture & Cyber TDA LeadershipAct as Cyber Technical Design Authority (TDA) for the accountReview and approve solution architecturesDefine security reference architectures and patternsLead design governance forumsProvide security design sign-off and manage exceptionsEmbed security-by-design in all solutionsAdvise on IDAM, network, cloud and infrastructure security Governance, Risk & Compliance (GRC)Develop and maintain security policies aligned to ISO 27001 and Cyber Essentials PlusManage Security Risk Register, controls, RACI and RBAC modelLead risk identification, assessment,

treatment and reportingSupport audits and assurance activitiesContribute to Disaster Recovery, Business Continuity and security incident management, covering tracking, remediation, RCA, and reportingConduct assurance activities to validate control effectivenessProduce regular reporting packs covering risk, compliance, audits, and incidentsProvide and update relevant Security Training material for account personnel.

Vulnerability ManagementReview and triage vulnerability scans and penetration test reportsPrioritise vulnerabilities based on risk, impact, and contractual obligationsCoordinate remediation across technical teams, ensuring clear ownership and timely closureTrack vulnerabilities to distinguish new vs. existing issuesProvide remediation guidance and consultancy to stakeholdersDeliver reporting on remediation progress for internal and client consumptionYour skills and experience Your skills and experience

& ExperienceStrong GRC and risk management experienceFamiliarity with ISO27001, GDPR, NIST, and ITILExperience as Security Architect or TDAKnowledge of Zero Trust and cloud securityStrong stakeholder communication skills Ability to work in a secure, restricted-access environment Additional

Based on-site in the HighlandsEligibility for BPSS security clearanceWe are a Disability Confident EmployerCapgemini is proud to be a Disability Confident Employer (Level 2) under the UK Government’s Disability Confident scheme. As part of our commitment to inclusive recruitment, we will offer an interview to all candidates who: Declare they have a disability, andMeet the minimum essential criteria for the role.

Please opt in during the application process.Baseline Personnel Security Standard (BPSS) To be successfully appointed to this role you will need to undergo Baseline Personnel Security Standard checks. There are no nationality or residency restrictions, although if you have resided outside of the UK within the last 3 years, further checks may be required.

There are other criteria and check required for BPSS, and throughout the recruitment process, you will be asked questions about your security clearance eligibility such as, but not limited to, country of residence and nationality.Make it real – what does it mean for you?Flexibility to work your wayYou will be encouraged to have a positive work-life balance. Our hybrid-first way of working means we embed hybrid working in all that we do and make flexible working arrangements the day-to-day reality for our people. All UK employees are eligible to request flexible working arrangements.

Your wellbeingYou’d be joining an accredited Great Place to work for Wellbeing in 2024. Employee wellbeing is vitally important to us as an organisation. We see a healthy and happy workforce a critical component for us to achieve our organisational ambitions.To help support wellbeing we have trained ‘Mental Health Champions’ across each of our business areas, and we have invested in wellbeing apps such as Thrive and Peppy. Shape your pathYou will be empowered to explore, innovate, and progress.

You will benefit from Capgemini’s ‘learning for life’ mindset, meaning you will have countless training and development opportunities from thinktanks to hackathons, and access to 250,000 courses with numerous external certifications from AWS, Microsoft, Harvard ManageMentor, Cybersecurity qualifications and much more. Shared energyYou’ll be bringing your unique skills and perspectives to the team, inspiring and taking inspiration from your teammates as you unlock value in everything you do.

You’ll be joining a professional community of experts, who have got your back and will support you, every step of the way.Why should you consider Capgemini?Growing clients’ businesses while building a more sustainable, more inclusive future is a tough ask. When you join Capgemini, you’ll join a thriving company and become part of a collective of free-thinkers, entrepreneurs and industry experts. We find new ways technology can help us reimagine what’s possible.

It’s why, together, we seek out opportunities that will transform the world’s leading businesses, and it’s how you’ll gain the experiences and connections you need to shape your future. By learning from each other every day, sharing knowledge, and always pushing yourself to do better, you’ll build the skills you want. You’ll use your skills to help our clients leverage technology to innovate and grow their business.

So, it might not always be easy, but making the world a better place rarely is.About CapgeminiCapgemini is an AI-powered global business and technology transformation partner, delivering tangible business value. We imagine the future of organisations and make it real with AI, technology and people. With our strong heritage of nearly 60 years, we are a responsible and diverse group of over 420,000 team members in more than 50 countries.

We deliver end-to-end services and solutions with our deep industry expertise and strong partner ecosystem, leveraging our capabilities across strategy, technology, design, engineering and business operations. The Group reported 2025 global revenues of €22.5 billion. Make it real | www.capgemini.com