IT Risk Advisor

Our Oil & Gas Operator client is currently recruiting for the position of IT Risk Advisor based in Aberdeen
 
3/2 hybrid working
Onsite Car Parking
38 days per annum paid holiday

Role overview
 
An IT Risk Assessment advisor that specialises in Technical Security Architecture ‘by design’ to provide technical security oversight and architectural assurance across both delivery projects and business as usual (BAU) operations.
 
The role sits at the heart of the company’s technology governance, ensuring secure design decisions, controlled change, and proportionate risk treatment across cloud, on premises, and hybrid environments.
 
You will work closely with architects, engineers, delivery teams, and operations to keep security embedded without slowing the business.
 
Security architecture governance and interface with enterprise architecture:
 
Define and maintain security architecture patterns, reference designs, and secure configuration baselines (cloud and on-prem)
Drive awareness of secure-by-design practices across engineering teams.
Attend and contribute to the Architecture Review Board (ARB)
Maintain and evolve security architecture patterns and standards (e.g. IAM, network segmentation, cloud security baselines)
Review and assess high risk security architecture exceptions, ensuring risks are clearly understood and appropriately managed
 
Provide technical and specialised ‘Secure by design’ and security architecture project advisory:
 
Provide hands-on security architecture advice to delivery teams to ensure secure patterns, reference architectures, and hardening baselines are applied.
Perform threat-informed design reviews and ensure appropriate control selection
Enable early engagement to reduce downstream risk and rework
 
Change and Operational security oversight (BAU):
 
Attend Change Advisory Boards (CABs) to provide security approval and challenge
Review and approve high risk firewall rule changes
Review high risk configuration changes across Azure and on prem environments. Perform targeted reviews of high-risk configurations (e.g. firewall, network, cloud, infrastructure). Identify misconfigurations and exposure risks against defined baselines
Risk prioritise high risk and zero-day vulnerabilities, working with technology and operations teams on remediation approach and urgency
Provide pragmatic security input to IT Teams and Infrastructure Suppliers - aligned to operational and availability requirements
Provide BAU IT teams clear, actionable recommendations to reduce attack surface and improve resilience
 
Skills, experience & attributes of candidate:
 
Strong background in technical security architecture within complex enterprise environments
Experience across cloud (Azure) and on prem infrastructure
Comfortable operating in governance forums while remaining technically credible
Confident challenging design and change decisions constructively
Able to translate technical security risk into clear business impact
 
Advantageous:
Bachelor’s in CS, InfoSec, or equivalent experience
Certifications: GICSP, CISSP, or equivalent qualification
Experience working as a security architect
Understanding of regulatory frameworks e.g. NIS2, Cyber Resilience Act

Contract position
 
If you feel that you are well suited to the above opportunity and would like to find out more then please contact Orion Group for more information or apply by forwarding your current CV quoting reference: TR/(phone number removed)

People are our business worldwide
 
Orion Group was founded in 1987 and is now one of the largest, independent, international recruitment companies. We have a network of 200 employees working from 24 offices, delivering a range of services – Talent Acquisition, Recruitment Outsourcing Services, Retained Search, Global Workforce Solutions, Completions & Commissioning and Materials Management – across 68 countries. As a global leader in workforce solutions, we recruit personnel across the Engineering & Technical, Office & Commercial, Scientific and Skilled Trades disciplines, for sectors including Oil & Gas, Life Science, Power & Utilities, Constructions & Infrastructure, Manufacturing and Renewables