Cyber Risk & Information Security Advisor

Scottish Government Recruitment; Glasgow; On-site; GBP 60,000 - 90,000; Full time

Job summary

Scottish Government Recruitment is seeking a Security and Information Risk Advisor within our Digital Risk & Security branch to guide information security controls and risk management for Social Security Scotland.

You will advise on security strategies, conduct risk assessments, investigate breaches, and help develop security policies and standards to ensure regulatory compliance across critical information systems.

Qualifications

• Experience advising on security strategies and standards adoption.
• Experience conducting security risk assessments and business impact analyses on complex systems.
• Experience investigating major security breaches and recommending controls.
• Contributing to information security policies, standards and guidelines.
• Interpreting information assurance policies and applying them to risk management.
• Using control testing information to support information assurance assessments.

Responsibilities

• Provide advice and guidance on security strategies to manage identified risks and ensure adoption and adherence to standards.
• Obtain and act on vulnerability information and conduct security risk assessments and business impact analyses on complex information systems.
• Investigate major security breaches and recommend appropriate control improvements.
• Contribute to development of information security policy, standards and guidelines.
• Interpretation of information assurance and security policies and apply these to manage risks.
• Use control testing information to support information assurance assessments.

Skills

Security risk assessments

Vulnerability management

Information assurance

Policy development

Stakeholder collaboration

Job description

Scottish Government Recruitment is seeking a Security and Information Risk Advisor within our Digital Risk & Security branch to guide information security controls and risk management for Social Security Scotland.

You will advise on security strategies, conduct risk assessments, investigate breaches, and help develop security policies and standards to ensure regulatory compliance across critical information systems.