IT Information Security & Business Continuity Specialist
Location: North Lanarkshire (Hybrid)
Contract Type: 12 month FTC (High likelihood of extension)
This role will lead the development and ongoing maturity of the organisation’s Business Continuity capabilities. Working closely with the Information Security Officer, you will ensure business resilience processes are robust, consistent, and compliant with ISO22301. You will play a key part in strengthening organisational preparedness, crisis response, and overall continuity planning.
Key Responsibilities:
* Support the creation and maintenance of a comprehensive Business Continuity Management System (BCMS), aligned to ISO22301, ISO27001, and relevant regulatory standards.
* Lead and oversee Business Impact Analyses (BIAs) and risk assessments to identify critical business processes and determine potential disruption impacts.
* Assist in developing risk mitigation strategies informed by thorough risk modelling and analysis.
* Coordinate the creation and refinement of crisis management and continuity plans, ensuring collaboration and buy-in across key business areas.
Crisis Preparedness & Training:
* Plan, organise, and facilitate business continuity and crisis management exercises.
* Produce follow-up remediation plans and drive continuous improvement actions based on exercise outcomes.
* Deliver training and awareness sessions to increase organisational understanding of business continuity and crisis response.
Risk & Compliance Support:
* Contribute to the development of a security risk framework that aligns with enterprise risk management principles.
* Participate in the design and delivery of compliance training, promoting a culture of accountability, risk awareness, and resilience.
* Provide expert guidance to stakeholders on business continuity, disaster recovery, and resilience best practices.
Skills, Knowledge & Experience
Essential:
* Minimum 5 years’ experience in a business continuity, information security, or resilience-focused role.
* Strong expertise in ISO22301 and Business Continuity Management Systems.
* Knowledge of risk management frameworks and cybersecurity standards such as ISO22301, ISO27001, and NIS2.
* Hands-on experience conducting risk assessments and developing effective mitigation plans.
* Proven ability to build strong working relationships with stakeholders and communicate complex information clearly.
* Ability to operate effectively in a complex organisational environment, using creativity and adaptability.
* Excellent organisational skills with the ability to manage multiple tasks, priorities, and stakeholders.
* Competence in developing and maintaining business continuity plans, processes, and standards.
* Strong verbal and written communication skills.
Company benefits:
* 8% pension contribution
* Private Health scheme with Family medical cover
* Flexible working options
To be considered please apply today and Sophie will be in touch.