Enterprise Security Risk Manager

Head Resourcing Ltd; City of Edinburgh; On-site; GBP 65,000 - 70,000; Full time

Job summary

Head Resourcing Ltd in Edinburgh is seeking an experienced Enterprise Security Risk Manager to help shape and strengthen its cyber security posture. You will work with senior technology and business stakeholders to assess cyber risk, drive security assurance, lead investigations, review technology and AI solutions, and ensure robust security controls are embedded across the organisation.

This high-visibility role blends hands-on security expertise with strategic risk management and effective

Qualifications

• Strong experience in cyber risk assessment, security assurance and control evaluation.
• Proven incident investigation and threat hunting capabilities.
• Knowledge of security standards, risk frameworks and audit processes.
• Excellent communication skills with the ability to influence both technical and non-technical stakeholders.
• Experience with Microsoft security technologies (Entra ID, Defender, Purview) is advantageous.

Responsibilities

• Assess cyber risks, control effectiveness and emerging threat intelligence.
• Review security designs for technology change, cloud services and business-led solutions.
• Lead security investigations, threat hunting and incident response activities.
• Manage penetration testing, attack simulations and remediation programmes.
• Evaluate security controls across identity, endpoint, cloud, data protection and email security.
• Conduct third-party and AI security due diligence.
• Support audit, cyber insurance and regulatory assurance activities.
• Deliver security awareness initiatives and stakeholder training.
• Advise senior leaders on security risks and recommended actions.

Skills

Cyber risk assessment

Security assurance

Control evaluation

Incident response

Threat hunting

Stakeholder engagement

Job description

Enterprise Security Risk Manager

Edinburgh | £65,000 - £70,000 + Excellent Benefits

An established Edinburgh-based investment organisation is seeking an experienced Enterprise Security Risk Manager to help shape and strengthen its cyber security posture.

Working closely with senior technology and business stakeholders, you'll be responsible for assessing cyber risk, driving security assurance activities, leading investigations, reviewing technology and AI solutions, and ensuring effective security controls are embedded across the organisation.

This is a highly visible role that combines hands-on technical security expertise with strategic risk management and stakeholder engagement.

What you'll be doing:

• Assessing cyber risks, control effectiveness and emerging threat intelligence
• Reviewing security designs for technology change, cloud services and business-led solutions
• Leading security investigations, threat hunting and incident response activities
• Managing penetration testing, attack simulations and remediation programmes
• Evaluating security controls across identity, endpoint, cloud, data protection and email security
• Conducting third-party and AI security due diligence
• Supporting audit, cyber insurance and regulatory assurance activities
• Delivering security awareness initiatives and stakeholder training
• Advising senior leaders on security risks and recommended actions

What we're looking for:

• Strong experience in cyber risk assessment, security assurance and control evaluation
• Expertise across Microsoft security technologies, including Entra ID, Defender and Purview
• Experience reviewing security architecture and technology change initiatives
• Proven incident investigation and threat hunting capability
• Knowledge of security standards, risk frameworks and audit processes
• Excellent communication skills with the ability to influence technical and non-technical stakeholders