Cyber Security Risk Manager - 3 month initial contract

Bright Purple; City of Edinburgh; On-site; GBP 65,000 - 85,000; Full time

Job summary

A top technology recruitment firm in Scotland is seeking a Cyber Risk Manager to develop and implement a comprehensive cyber risk management program. The ideal candidate will have experience in cyber security risk management, a deep understanding of frameworks like ISO 27001 and NIST, and excellent communication skills. This role offers the opportunity to work collaboratively across departments while enhancing the organization's cyber resilience.

Qualifications

• Experience in a cyber security risk management role.
• Strong understanding of cyber security frameworks and standards (ISO 27001, SOC2, NIST, GDPR).
• Professional certifications such as CRISC, CISM, or CISSP are desirable.

Responsibilities

• Design and deliver a robust cyber security risk management framework.
• Conduct regular risk and vulnerability assessments.
• Analyse cyber security data to identify risks and recommend mitigation strategies.

Skills

Analytical skills

Communication skills

Stakeholder engagement

Risk assessment

Tools

Risk assessment tools

Job description

I'm currently recruiting for a highly skilled Cyber Risk Manager to lead the development and implementation of a cyber risk management programme.

Key Responsibilities

1. Design and deliver a robust cyber security risk management framework.
2. Conduct regular risk and vulnerability assessments.
3. Work collaboratively across departments to define risk tolerance and align with strategic objectives.
4. Analyse cyber security data to identify risks and recommend mitigation strategies.
5. Maintain comprehensive risk documentation, including registers, impact analyses, and treatment plans.
6. Communicate risk insights and recommendations clearly to stakeholders.
7. Develop and monitor key risk indicators (KRIs) and key performance indicators (KPIs).
8. Support project teams in embedding risk management throughout the project lifecycle.
9. Collaborate with internal and external partners to enhance incident response and cyber resilience.

Candidate Requirements

• Experience in a cyber security risk management role.
• Strong understanding of cyber security frameworks and standards (ISO 27001, SOC2, NIST, GDPR).
• Excellent analytical, communication, and stakeholder engagement skills.
• Proficient in risk assessment tools and methodologies.

Professional certifications such as CRISC, CISM, or CISSP are desirable.

Bright Purple is an equal opportunities employer: we are proud to work with clients who share our values of diversity and inclusion in our industry.