Cyber & Data Security Risk Consultant

JR United Kingdom; City of Edinburgh; Hybrid; GBP 57,000 - 66,000; Full time

Job summary

A leading company is seeking a Cyber & Data Security Risk Consultant in Edinburgh to oversee their cyber and data security risk management. The consultant will provide expert advice and challenge senior leaders, ensuring compliance with regulatory frameworks and protecting sensitive information. This hybrid role requires strong technical skills and relevant certifications, offering an attractive salary and benefits package.

Benefits

Up to 14% employer matching pension scheme

Qualifications

• Grounding in cybersecurity, ideally in financial services.
• Exposure to regulatory frameworks like GDPR or CCPA.
• Understanding of risk management principles within governance.

Responsibilities

• Lead independent, risk-based assurance and oversight of cyber and data security risk.
• Provide insight across key domains like IAM, endpoint security, incident response.
• Oversee frameworks for identifying, assessing, and reporting risks.

Skills

Cybersecurity

Risk Management

Data Privacy

Application Security

Incident Response

Education

Relevant Industry Certifications (CISSP, CISM, CRISC, etc.)

Job description

Social network you want to login/join with:

Cyber & Data Security Risk Consultant, Edinburgh

Client: Be-IT

Location: Edinburgh, United Kingdom

Job Category: Other

EU work permit required: Yes

Job Views: 2

Posted: 28.06.2025

Expiry Date: 12.08.2025

Job Description:

Cyber & Data Security Risk Consultant

Location: Edinburgh - Hybrid 50%

Salary: Around £57,000 with an up to 14% employer matching pension scheme

Our client is seeking a Cyber & Data Security Risk Consultant to help shape and oversee the Group’s approach to cyber and data security risks. Sitting in the second line of defence, you’ll act as an expert advisor and independent challenger to senior leaders.

What you’ll do:

• Lead independent, risk-based assurance and oversight of cyber and data security risk.
• Provide insight and challenge across key domains like IAM, endpoint security, incident response, and more.
• Oversee frameworks for identifying, assessing, and reporting cyber and information risks.

What you’ll bring:

• A solid grounding in cybersecurity (ideally in financial services), with exposure to key regulatory frameworks like GDPR or CCPA.
• Understanding of risk management principles, ideally within a 2nd line or governance function.
• Relevant industry certifications such as CISSP, CISM, CRISC, CDPSE, CompTIA Security+ or similar.
• Strong technical awareness across areas like application security, incident response, and data privacy.