Cyber Security Lead

CompanyInfected Blood Compensation Authority

LocationGlasgow, Scotland, United Kingdom

Posted At3/6/2026

UK Visa Sponsorship Analytics

Analytics are greyed out due to low classification confidence (40.0%).

Occupation Type

Cyber security professionals

Occupation Code Skill LevelHigher Skilled

Sponsorship Salary Threshold

£48,500 (£24.87 per hour)

Occupation rate applies

Above analytics are generated algorithmically based on job titles and may not always be the same as the company's job classification. You can also check detailed occupation eligibility, and salary criteria on our UK Visa Eligible Occupations & Salary Thresholds page.

Disclaimer: Hunt UK Visa Sponsors aggregates job listings from publicly available sources, such as search engines, to assist with your job hunting. We do not claim affiliation with Infected Blood Compensation Authority. For the most up-to-date job details, please visit the official website by clicking "Apply Now."

Description

As the Cyber Security Lead at IBCA, you will play a vital role in upholding our commitment to the infected, affected, and deceased blood community. We are an organisation built on the principles of integrity, compassion, and transparency, and your work is the foundation that keeps our services secure and reliable. You are not just protecting a network; you are safeguarding the privacy and trust of individuals who have waited decades for recognition and support.

Responsibilities

Technical Design & Secure Engineering: Act as the primary security design authority for the compensation services architecture. Collaborate with Solution Architects and Developers to implement Secure by Design principles at the code and infrastructure level, ensuring robust identity management (e.g., MFA, RBAC), data encryption at rest and in transit, and secure API integrations across the digital service;
Security Automation and Tooling: Lead the integration of security into the Software Development Lifecycle (SDLC) by implementing and overseeing DevSecOps practices. This includes managing automated security testing tools—such as Static and Dynamic Application Security Testing (SAST/DAST) and Software Composition Analysis (SCA)—to identify and remediate code vulnerabilities and insecure dependencies in real-time;

Compliance and Regulatory Oversight: Ensure that all security practices, policies, and systems are fully compliant with relevant regulations, including the Data Protection Act, GDPR, and UK government security standards such as CAF and Secure by Design;

Cybersecurity Management: Oversee the security of the IT systems and infrastructure used to manage compensation claims, ensuring the implementation of best practices in cybersecurity. Work with IT teams to safeguard against data breaches, hacking attempts, and insider threats;

Incident Response: In the event of a security breach or data incident, lead the response efforts, including investigating the breach, implementing remedial actions, and liaising with the Information Commissioner’s Office (ICO) and other regulatory bodies.

Person specification

Essential

Solid understanding of secure development frameworks (such as the OWASP Top 10 or SANS Top 25) and the ability to apply them within a cloud-native environment. You should have experience reviewing system architectures and code to ensure the implementation of technical controls like Zero Trust principles, robust API security, and secure identity/access management (IAM).

Practical experience in implementing and managing automated security tools within a CI/CD pipeline. This includes the ability to interpret and act upon results from SAST/DAST (Static/Dynamic Analysis) tools, container scanning, and infrastructure-as-code (IaC) security assessments to ensure vulnerabilities are caught and remediated before they reach production.

Proven experience of conducting security assurance activities, including providing security assurance for suppliers, ensuring compliance with relevant security regulations and standards and implementing comprehensive security policies and procedures to align with UK government standards and best practice.

Ability to support the development and delivery of security awareness training programs and experience of promoting a security first culture in the workplace.

Proven ability and experience of building and managing effective stakeholder relationships to shape the outcomes of a project, considering different individual needs, views, and ideas.

Influential, and able to communicate in a straightforward, honest, and engaging manner, choosing appropriate styles and tools to maximise and check understanding and impact.

Demonstrated experience in managing security projects within a sensitive data environment, ideally within a public sector or government agency.

Ability to identify, assess, and manage security and compliance risks. Knowledge of audit processes, security certifications, and risk management strategies.

Familiarity with cybersecurity confidentiality, integrity and availability principles, fundamentals of cyber security knowledge, and protection of IT systems used for sensitive data storage and processing.

Ability to respond quickly to challenges and security incidents, providing practical solutions and guidance to teams and senior management.

Desirable

Security Certifications: CompTIA Security+, CC – Certified in Cybersecurity, or other relevant security certifications would be advantageous.
Incident Response Experience: Experience managing or responding to data breaches or cyber incidents, with a focus on minimizing impact and ensuring regulatory compliance.

Additional information:

A minimum 60% of your working time should be spent at your principal workplace. Although requirements to attend other locations for official business will also count towards this level of attendance.