Enterprise Security Governance Analyst

Provntalent; City of Edinburgh; Hybrid; GBP 42,000 - 62,000; Full time

Benefits offered by this job

Competitive base salary

Benefits package

Job summary

Provntalent is seeking an Enterprise Security Governance Analyst in Edinburgh with hybrid working. The role focuses on overseeing cyber security governance, coordinating reviews, and maintaining governance documentation while engaging with security, technology and business stakeholders.

The position emphasizes organisation, governance discipline and attention to detail, offering exposure across the enterprise cyber security function and a competitive salary and benefits package.

Qualifications

• Experience within cyber security governance, risk, assurance or a related environment.
• Strong organisational and coordination skills.
• Ability to manage multiple ongoing activities and priorities.
• Experience maintaining documentation, records or audit evidence.
• Experience coordinating reviews, actions or assurance activities.

Responsibilities

• Support the delivery of security governance and assurance activities.
• Maintain security documentation, records and supporting evidence.
• Coordinate security reviews, assessments and other recurring activities.
• Track risks, findings and agreed actions through to completion.
• Support audit and assurance processes.
• Coordinate activity between security, technology and business stakeholders.
• Produce regular reporting and management information.
• Help manage security‑related requests and governance processes.
• Liaise with external suppliers and specialist partners where required.
• Support security awareness and internal communications.
• Ensure agreed actions and deliverables are appropriately tracked and completed.

Skills

Organisational skills

Coordination skills

Security governance

Documentation

Reporting and MI

Stakeholder management

Ownership & delivery

Job description

Enterprise Security Governance Analyst

Edinburgh | Hybrid

We’re working with an established investment management organisation looking to hire an Enterprise Security Governance Analyst to join its Edinburgh-based security team. This is a broad role focused on the governance, coordination and oversight of cyber security activities across the organisation. You’ll work closely with colleagues across security, technology and the wider business to ensure key processes are properly managed, documented and followed through. Rather than being a deeply hands‑on technical security position, the role is centred around keeping security activities organised and effective — coordinating reviews, maintaining governance documentation, tracking actions and helping provide clear visibility across ongoing security work. It would suit someone who understands the fundamentals of cyber security and risk but whose real strengths are organisation, governance, stakeholder management and attention to detail.

Responsibilities

• Support the delivery of security governance and assurance activities
• Maintain security documentation, records and supporting evidence
• Coordinate security reviews, assessments and other recurring activities
• Track risks, findings and agreed actions through to completion
• Support audit and assurance processes
• Maintain governance processes and associated documentation
• Coordinate activity between security, technology and business stakeholders
• Produce regular reporting and management information
• Help manage security‑related requests and governance processes
• Liaise with external suppliers and specialist partners where required
• Support security awareness and internal communications
• Ensure agreed actions and deliverables are appropriately tracked and completed

Requirements

• Experience within cyber security governance, risk, assurance or a related environment
• Strong organisational and coordination skills
• Ability to manage multiple ongoing activities and priorities
• Experience maintaining documentation, records or audit evidence
• Experience coordinating reviews, actions or assurance activities
• Good general understanding of cyber security and technology
• Strong attention to detail
• Comfortable producing reports and management information
• Confident working with stakeholders across different areas of a business
• Ability to take ownership of activities and follow them through to completion

Desirable

• Experience working within a structured corporate environment
• Exposure to security, risk or governance tooling
• Experience working with external suppliers or third parties
• Exposure to security testing or assurance activities
• Familiarity with recognised security or risk frameworks
• Relevant security, risk, audit or service-management qualifications

A background within a specific industry is not essential. The organisation is open to candidates from a range of environments and is particularly interested in people who can bring strong structure, organisation and governance disciplines. This is a great opportunity to gain broad exposure across enterprise cyber security while working closely with both technical teams and senior stakeholders. The position offers a competitive base salary and benefits package.