Cyber & Data Security Risk Consultant

ZipRecruiter; City of Edinburgh; Hybrid; GBP 52,000 - 62,000; Full time

Job summary

A leading company in financial services is seeking a Cyber & Data Security Risk Consultant in Edinburgh. This hybrid role involves overseeing cyber and data security risks, providing expert advice, and ensuring compliance with regulatory frameworks. Ideal candidates will possess strong cybersecurity knowledge and relevant certifications, ready to take on a challenging position that shapes their security strategy.

Qualifications

• Solid grounding in cybersecurity, ideally in financial services.
• Understanding of risk management principles within governance.
• Exposure to regulatory frameworks like GDPR or CCPA.

Responsibilities

• Lead independent, risk-based assurance and oversight of cyber and data security risks.
• Provide insight and challenge across key domains like IAM, endpoint security.
• Oversee frameworks for identifying and reporting risks.

Skills

Cybersecurity

Risk Management

Technical Awareness

Education

Relevant Industry Certifications

Job description

Job Description

Cyber & Data Security Risk Consultant

Location: Edinburgh - Hybrid 50%

Salary: Around £57,000 with an up to 14% employer matching pension scheme

Our Client is seeking a Cyber & Data Security Risk Consultant to help shape and oversee the Group’s approach to cyber and data security risks. Sitting in the second line of defence, you’ll act as an expert advisor and independent challenger to senior leaders.

What you’ll do:

• Lead independent, risk-based assurance and oversight of cyber and data security risk.
• Provide insight and challenge across key domains like IAM, endpoint security, incident response and more.
• Oversee frameworks for identifying, assessing, and reporting cyber and information risks.

What you’ll bring:

• A solid grounding in cybersecurity (ideally in financial services), with exposure to key regulatory frameworks like GDPR or CCPA.
• Understanding of risk management principles, ideally within a 2nd line or governance function.
• Relevant industry certifications such as CISSP, CISM, CRISC, CDPSE, CompTIA Security+ or similar.
• Strong technical awareness across areas like application security, incident response, and data privacy.