Information Risk & AI Assurance Analyst

Baillie Gifford Group; City of Edinburgh; Hybrid; GBP 40,000 - 70,000; Full time

Job summary

Baillie Gifford in Edinburgh is seeking an Information Risk Analyst to assist with identification, analysis, monitoring and reporting of information risks. You will work with departments across the firm to build effective relationships and support a trusted-adviser approach, contributing to clear risk insight and proportionate challenge.

You will support the governance and reporting activities, contribute to penetration testing, security and cyber resilience exercises and other assurance work,

Qualifications

• Information security or technology risk qualifications preferred.
• Awareness of AI and emerging technologies and their risk implications.
• Ability to analyse information and evidence and communicate clearly with technical and non‑technical stakeholders.

Responsibilities

• Assist with information risk analysis and oversight, including AI and other emerging technologies, information and cyber security, technology and data privacy risks.
• Support the risk management framework, policies and procedures and contribute to risk reporting.
• Assist with the information risk assurance programme, including penetration testing, security and cyber resilience exercises, across infrastructure, cloud services, applications, identity and access, data flows and third parties.
• Apply technical knowledge to support information risk assessments and control reviews, escalating issues where appropriate.
• Collaborate with committees and internal/external boards on information risk matters and report results clearly.
• Develop knowledge across information security, technology risk, data privacy and emerging technologies to broaden responsibility over time.

Skills

Nurture relationships

Adaptability

Openness & discernment

Team working

Education

Information security/technology risk qualifications

Job description

Baillie Gifford in Edinburgh is seeking an Information Risk Analyst to assist with identification, analysis, monitoring and reporting of information risks. You will work with departments across the firm to build effective relationships and support a trusted-adviser approach, contributing to clear risk insight and proportionate challenge.

You will support the governance and reporting activities, contribute to penetration testing, security and cyber resilience exercises and other assurance work,