Cyber Risk & Information Security Advisor

Work For Scotland; Glasgow, Dundee; Hybrid; GBP 50,000 - 75,000; Full time

Job summary

Work For Scotland in Scotland is seeking a Security and Information Risk Advisor to guide the specification, implementation and operation of cyber security controls across essential public services.

You will work with a range of stakeholders to perform risk assessments, investigate breaches and contribute to the development of information security policies and standards, ensuring compliance with legislation and relevant standards.

Qualifications

• Provide advice on security strategies to manage identified risks and ensure adherence to standards.
• Obtain and act on vulnerability information and conduct risk assessments on complex systems.
• Investigate major security breaches and recommend control improvements.
• Contribute to information security policy, standards and guidelines.
• Interpret information assurance policies and apply them to manage risks.
• Use testing information to support information assurance assessments.

Responsibilities

• Provide advice and guidance on security strategies to manage identified risks and ensure adoption and adherence to standards.
• Obtain and act on vulnerability information and conduct security risk assessments and business impact analyses on complex information systems.
• Investigate major security breaches and recommend appropriate control improvements.
• Contribute to development of information security policy, standards and guidelines.
• Interpret information assurance and security policies and apply these to manage risks.
• Use control testing information to support information assurance assessments.

Skills

Security risk assessment

Vulnerability management

Incident investigation

Policy development

Job description

Work For Scotland in Scotland is seeking a Security and Information Risk Advisor to guide the specification, implementation and operation of cyber security controls across essential public services.

You will work with a range of stakeholders to perform risk assessments, investigate breaches and contribute to the development of information security policies and standards, ensuring compliance with legislation and relevant standards.