Security Control Specialist

Virgin Money; Glasgow; Hybrid; GBP 40,000 - 51,000; Full time

Job summary

A leading financial institution is seeking an Information Security Risk Manager to enhance their cyber operations. This role involves developing security controls, managing cyber risks, and ensuring compliance with regulatory standards. The ideal candidate has expert knowledge in cyber security governance and frameworks like NIST and CIS. This position offers a competitive salary range of £40,800 to £51,000 and a hybrid work model.

Benefits

25 days holiday annually

Private medical insurance

Competitive pension scheme

Performance-related bonus

Training and development opportunities

Flexible benefits scheme

Life assurance

Paid volunteering days

Qualifications

• Expert knowledge of frameworks like NIST, COBIT, CIS Controls.
• Understanding of regulatory requirements relevant to cyber security.
• CISSP certification would be a plus.

Responsibilities

• Raise awareness of cyber risks among employees.
• Support development of new security controls.
• Provide data-driven insights for risk packs.
• Work with Risk, Compliance, and Regulatory teams.
• Manage stakeholders for assurance best practices.

Skills

Expert knowledge of cyber security governance frameworks

Understanding of cyber security risk management principles

Awareness of emerging cyber security trends

Tools

Knowledge of security technologies

Job description

Search our opportunities to find your fit

Apply now Job no: 109410
Work type: Permanent Full Time
Location: Head Office - Glasgow, Head Office - Newcastle, Hybrid
Categories: Technology Operations

Business Unit: Chief Operating Office
Salary range: £40,800 to £51,000 per annum DOE
Location: UK Hybrid – Work from anywhere in the UK, with flexibility to occasionally visit Glasgow or London HUB.
Contract type: Permanent – Full Time

Our Team

Working in Cyber Security is a big deal as we continue to play a key role in keeping Virgin Money safe. We’re on an exciting journey with a big vision as we grow our team to enhance our security and cyber operations. We’ll be working to protect against security threats to Virgin Money and the financial services sector. You’ll play an important role in helping us understand the security landscape so we can protect ourselves from risk. This helps to inform our Cyber Strategy, Culture and Education work as well as direct investments to mitigate risks and prevent and detect attacks.

The Control Tower Team supports the organisation’s overall Cyber Security capabilities specifically focusing on enhancing our security posture against attacks to ensure we remain available to customer and colleagues. The Information Security Risk Manager role is a key role that provides essential oversight and analysis of critical processes within the function

What you’ll be doing

• Raise awareness of cyber risks and control best practices among employees at all levels of the organisation to further embed secure by design mindset.
• Support in the development and delivery of new cyber security controls with internal security control SMEs.
• Drive continuous improvement techniques with a focus on data and measurement to ensure our objective of being data driven is being achieved
• Provide data driven insights and assessment for key risk packs and reporting outputs for Technology functions with delivery of core mandated reporting requirements such as risk committees and board reviews
• Work closely with the Risk, Compliance and Regulatory teams to ensure regulatory compliance, including technical control compliance.
• Provide advice and support risk management responses, including risk and audit requests, regulatory requirement assessments and third-party security control capability requests.
• Effective stakeholder management across the lines of defence to ensure alignment and adherence to assurance best practice.

We need you to have

• Expert knowledge of cyber security governance frameworks, policies, and procedures such as NIST, COBIT, CIS (Center for Internet Security) Controls
• Understanding of cyber security risk management principles and practices.
• Awareness of emerging cyber security trends, threats, and technologies.

It’s a bonus if you have but not essential

• Knowledge of security technologies, tools, and solutions used in cybersecurity programs.
• Understanding of regulatory requirements and industry standards relevant to cyber security.
• CISSP certified

The extras you’ll get

• 25 days holiday per year, increasing over time to 30. Plus, an option to buy more, giving you even more choice.
• Private medical insurance
• A highly competitive pension to help you build a strong foundation for retirement
• Access to an annual performance-related bonus
• Training and development to help you progress your career
• A great selection of additional benefits through our flexible benefits scheme
• Life assurance to provide peace of mind for you and your loved ones
• Up to 2 days of paid volunteering a year

If we’re lucky to receive a lot of interest, we may close the advert early. Please ensure to submit your applications as soon as possible.

Virgin Money is so much more than just a bank. As part of the Nationwide group, together we’re the UK's first full-service mutual bank serving millions of retail and business customers and all driven by our purpose: Banking but fairer, more rewarding and for the good of society. With us, you’ll be part of an organisation uniquely positioned to make a difference to the lives of customers, communities and broader society and embark on a collaborative, customer obsessed, and fun-filled career journey. Embrace the weekdays, enjoy fantastic perks, and make a meaningful positive difference. Time to discover what it means to be part of the first mutual full-service banking provider.

Be yourself at Virgin Money

At Virgin Money, we celebrate everyone. We have fun, think big, and relentlessly include each other, all in pursuit of our purpose: Banking – but fairer, more rewarding, and for the good of society. We’re committed to creating an inclusive culture where colleagues feel safe and inspired to contribute, speak up and be heard.

As a Disability Confident Leader, we’re committed to removing any obstacles to inclusion. If you need any reasonable adjustments or support making your application, contact our Talent Acquisition team at [e-mail]

Please note: If we receive a high volume of eligible applications, we may need to prioritise candidates whose skills and experience most closely align with the role, while still ensuring fair and equitable consideration for all applicants.

Advertised: 19 Nov 2025 GMT
Applications close: 03 Dec 2025 GMT