Enterprise Cyber Risk & Security Assurance Lead

Core-Asset Consulting Ltd; City of Edinburgh; On-site; GBP 70,000 - 110,000; Full time

Job summary

Core-Asset Consulting is seeking an Enterprise Security Risk Manager to Edinburgh to translate security strategy into day-to-day assurance and risk management. You will assess cyber risk, review technology and AI solutions, and lead security investigations while coordinating testing and regulatory activity.

The role requires you to review security designs, manage risk across the firm, and provide expert security guidance to Technology and the wider business.

Qualifications

• Strong practical experience of cyber risk assessment, security assurance and control evaluation.
• Experience reviewing security designs for technology change, software development and third-party solutions.
• Experience with the Microsoft 365 security stack and related tooling.
• Incident triage, threat hunting and investigation capabilities.
• Experience designing tests and assessing security controls.

Responsibilities

• Assess cyber risks, control strengths, security exceptions and attack paths.
• Review security designs before production use across technology and departments.
• Triage security incidents and lead investigations into data protection and insider risk alerts.
• Design penetration tests and attack simulations and drive remediation.
• Review endpoint, identity, data protection and cloud security controls.
• Conduct due diligence on third parties and AI providers; manage risk data and reporting.
• Produce risk and assurance artifacts and support audits and governance forums.
• Communicate requirements across the firm and advise stakeholders.

Skills

cyber risk assessment

security assurance

security design review

Microsoft 365 Defender

Entra

Purview

incident triage

threat hunting

penetration testing design

data protection controls

third-party & AI security due care

regulatory & audit knowledge

stakeholder management

Tools

Microsoft 365 Defender

Entra

Purview

Job description

Core-Asset Consulting is seeking an Enterprise Security Risk Manager to Edinburgh to translate security strategy into day-to-day assurance and risk management. You will assess cyber risk, review technology and AI solutions, and lead security investigations while coordinating testing and regulatory activity.

The role requires you to review security designs, manage risk across the firm, and provide expert security guidance to Technology and the wider business.