Enterprise Governance Analyst

Core-Asset-Consulting; City of Edinburgh; On-site; GBP 42,000 - 60,000; Full time

Job summary

Core-Asset-Consulting in Edinburgh is seeking an Enterprise Governance Analyst to coordinate governance and administration that keeps security controls operating effectively. The role will maintain registers, records and procedures, administer testing and assurance processes, and track remediation and security debt, while representing the security function on governance forums and Working Groups.

As the firm embeds efficiencies and AI tools, this role will support AI governance,

Qualifications

• Qualifications related to Enterprise Security are desirable.
• Experience maintaining control registers, procedures, evidence and audit trails.
• Ability to coordinate penetration testing, security exceptions, audits and remediation activity.
• Good understanding of cyber security, infrastructure and risk-management concepts.
• Experience producing management information, key risk indicators and clear progress reporting.
• Working knowledge of AI governance, application approval and technology change controls.
• Strong attention to detail with the ability to follow issues through to closure.
• Good supplier, stakeholder and service-management skills.
• Relevant technology, security or risk-management certification is desirable.

Responsibilities

• Maintain AI application, agent and solution registers, including ownership, guardrails, approvals and periodic re-attestations.
• Administer AI application-approval processes and track material changes to models, features and supporting platforms.
• Track ongoing peer review of AI-generated code and maintain evidence required by the AI governance process.
• Administer penetration tests, red-team exercises and security exceptions, ensuring findings and actions are recorded and tracked.
• Coordinate internal and external audits and track regulatory and standards remediation to completion.
• Maintain security procedures and map control frameworks to relevant standards and requirements.
• Coordinate security-debt remediation and provide clear reporting on backlog, ownership and progress.
• Publish security management information and complete scheduled key-risk-indicator reporting.
• Triage non-incident security requests and coordinate follow-up with the Help Desk and relevant Technology teams.
• Coordinate access reviews and maintain the evidence required to demonstrate completion.
• Monitor emerging regulatory and standards developments and flag potential impacts for assessment.
• Coordinate supplier security meetings and track agreed actions and remediation.
• Publish internal threat-intelligence and security-awareness communications.

Skills

Enterprise security

Control registers

Penetration testing coordination

Cyber security concepts

Management information

AI governance

Attention to detail

Supplier/stakeholder management

Industry certifications

Job description

Enterprise Governance Analyst (16616) Edinburgh, Scotland

This role coordinates the governance and administration that keeps our client's security controls operating effectively. As the firm moves towards embedding efficiencies and AI tools, this role will play a key part in maintaining registers, records and procedures, administering testing and assurance processes, tracking remediation and security debt.

You'll also represent the security function on key governance forums and Working Groups

Skills/Experience:

• Qualifications related to Enterprise Security are desirable
• Experience maintaining control registers, procedures, evidence and audit trails
• Ability to coordinate penetration testing, security exceptions, audits and remediation activity
• Good understanding of cyber security, infrastructure and risk-management concepts
• Experience producing management information, key risk indicators and clear progress reporting
• Working knowledge of AI governance, application approval and technology change controls
• Strong attention to detail with the ability to follow issues through to closure
• Good supplier, stakeholder and service-management skills
• Relevant technology, security or risk-management certification is desirable

Core Responsibilities:

• Maintain AI application, agent and solution registers, including ownership, guardrails, approvals and periodic re-attestations
• Administer AI application-approval processes and track material changes to models, features and supporting platforms
• Track ongoing peer review of AI-generated code and maintain evidence required by the AI governance process
• Administer penetration tests, red-team exercises and security exceptions, ensuring findings and actions are recorded and tracked
• Coordinate internal and external audits and track regulatory and standards remediation to completion
• Maintain security procedures and map control frameworks to relevant standards and requirements
• Coordinate security-debt remediation and provide clear reporting on backlog, ownership and progress
• Produce security management information and complete scheduled key-risk-indicator reporting
• Triage non-incident security requests and coordinate follow-up with the Help Desk and relevant Technology teams
• Coordinate access reviews and maintain the evidence required to demonstrate completion
• Monitor emerging regulatory and standards developments and flag potential impacts for assessment
• Coordinate supplier security meetings and track agreed actions and remediation
• Publish internal threat-intelligence and security-awareness communications