Edinburgh - Hybrid 50%
Salary: Around £55,000 with an up to 14% employer matching pension scheme
Lead independent, risk-based assurance and oversight of cyber and data security risk.
Provide insight and challenge across key domains like IAM, endpoint security, incident response and more.
Support enterprise-wide risk communication and reporting to drive good decisions and strong risk culture.
Oversee frameworks for identifying, assessing, and reporting cyber and information risks..
A solid grounding in cybersecurity (ideally in financial services), with exposure to key regulatory frameworks like GDPR or CCPA.
Understanding of risk management principles, ideally within a 2nd line or governance function.
Relevant industry certifications such as CISSP, CISM, CRISC, CDPSE, CompTIA Security+ or similar.
Strong technical awareness across areas like application security, incident response, and data privacy.
Excellent stakeholder engagement skills—you’ll work closely with leaders across the business.