Enterprise Security Governance Analyst - AI & Risk

Head Resourcing Ltd; City of Edinburgh; On-site; GBP 50,000 - 70,000; Full time

Job summary

Head Resourcing Ltd is supporting a leading financial services organisation in Edinburgh to recruit an Enterprise Security Governance Analyst. You will drive governance, risk and assurance across security controls, audits, and AI governance, partnering with stakeholders to raise the bar on enterprise risk management.

This role offers exposure to a highly regulated environment, emphasis on process improvement, and opportunities to influence security maturity through metrics and reporting.

Qualifications

• Experience within cyber security governance, risk, compliance, or security operations.
• Knowledge of security controls, audits, risk management, and assurance activities.
• Strong organisational skills with excellent attention to detail.
• Ability to manage multiple workstreams and engage with a range of stakeholders.
• Security or risk-related certifications are advantageous.

Responsibilities

• Maintain security governance processes, controls, and evidence registers.
• Coordinate security audits, penetration testing, and remediation activities.
• Support AI governance and technology change approval processes.
• Produce security reporting, risk metrics, and management information.
• Track security risks, exceptions, and control improvements.
• Work with internal stakeholders and third-party suppliers to ensure compliance and security best practice.

Skills

Governance

Risk management

Compliance

Security operations

Audits

Assurance

Stakeholder management

Job description

Head Resourcing Ltd is supporting a leading financial services organisation in Edinburgh to recruit an Enterprise Security Governance Analyst. You will drive governance, risk and assurance across security controls, audits, and AI governance, partnering with stakeholders to raise the bar on enterprise risk management.

This role offers exposure to a highly regulated environment, emphasis on process improvement, and opportunities to influence security maturity through metrics and reporting.