Senior InfoSec Advisor (IRM Manager)
We have a current opportunity for a Senior InfoSec Advisor (IRM Manager) on a 12 month PAYE contract basis. The position will be based in Aberdeen and will have a 3/2 hybrid working pattern Key ResponsibilitiesRisk Assessment and Secure by DesignPerform structured IT and information security risk assessments and threat modelling for new IT platforms, systems, and applications and for material changes.Provide security architecture advice (patterns, guardrails) aligned to NIST CSF / ISO 27001 and company standards.Define and agree control selection (prevent/detect/correct) proportionate to risk, including identity, data and platform controls.Conduct IT control walkthroughs to validate design and operating effectiveness; document evidence and issues.LOD2 Assurance and Critical AssetsOwn the LOD2 assurance plan with specific focus on critical assets and safety-related systems; define test scopes, frequency and metrics.Track high-risk deviations and risk acceptances; drive remediation and report residual risk to the CISO, CIO and business risk owners.OT / ICS SecurityOwn the LOD2 assurance plan across OT sites against the OT security standard, deciding the order and frequency of assessments aligned to risk and risk appetite.Provide OT security advisory in relation to OT security standards alignment across all OT sites, advocating for segmentation, zoning, secure remote access, security monitoring and patching controls in line with ISA/IEC 62443.Supplier and Third-Party Assurance ..... full job details .....