Information Risk Analyst

Baillie Gifford & Co; City of Edinburgh; On-site; GBP 60,000 - 90,000; Full time

Job summary

Baillie Gifford & Co in Edinburgh seeks an information risk professional to analyse information risks, including AI and emerging technologies, and support risk assurance across security, privacy and data controls.

You will contribute to governance reporting, collaborate across departments, and build capability in information security and technology risk while translating complex issues into clear risk insights for both technical and non-technical stakeholders.

Qualifications

• Information security or technology risk qualifications preferred.
• Applied knowledge of information security or technology risk.
• Interest in AI and emerging technologies and their risk implications.
• Ability to analyse information and evidence and communicate with technical and non-technical stakeholders.
• Experience gained through employment, study or other practical exposure.

Responsibilities

• Analyse information risks and assist in risk management within the firm's framework.
• Support assurance activities including penetration testing and cyber resilience exercises.
• Contribute to governance reporting to committees and boards.
• Develop knowledge of AI and emerging technologies and their risk implications.
• Translate complex risk issues into clear insights and escalate where needed.
• Collaborate with Business Risk and other departments on risk activities.

Skills

Nurture relationships

Adaptability

Openness & discernment

Team working

Education

Info sec/tech risk qualifications

Job description

Responsibilities

Information risk analysis and oversight

Support the analysis of information risks, including AI and other emerging technologies, information and cyber security, technology and data privacy risks in accordance with the risk management framework. Assist in developing the quality and efficiency of risk analysis and monitoring, including the associated risk management framework, policies and procedures. Support the identification, assessment, monitoring and reporting of risks arising from the firm's adoption and use of AI and other emerging technologies, in line with the firm's risk appetite and governance frameworks.

Assurance and technical support

Assist with the execution of the information risk assurance programme, including penetration testing, security and cyber resilience exercises, and other assurance activities across infrastructure, cloud services, applications, identity and access, data flows and third parties. Apply technical knowledge to provide support and cover for the Information Risk team on information security risk assessments and control reviews, as required. Use information and evidence to support well-reasoned conclusions, escalating issues and seeking specialist input where appropriate.

Governance, collaboration and stakeholder support

Assist in reporting to relevant committees and internal or external boards on information risk matters. Collaborate with the wider Business Risk Department and other departments on risk management activities, contributing to wider risk activity across the Department. Manage and respond to internal and external queries, providing clear and timely information and drawing on specialist support where needed.

Future capability

Develop technical knowledge and practical understanding across information security and technology risk, building confidence in engaging with technical colleagues and translating complex issues into clear risk insight. Build knowledge of AI and other emerging technologies and their risk implications, contributing ideas to improve how information risk is assessed, monitored, assured and communicated.

What success looks like

High-quality analysis: Information risks are assessed clearly and proportionately, with evidence used to support well-reasoned conclusions and appropriate escalation.

Practical technical contribution: Technical knowledge is applied effectively to support information security risk assessments and control reviews while recognising when specialist input is required.

Clear governance and reporting: Committee, board and stakeholder reporting is accurate, concise and timely, and internal and external queries are handled professionally.

Trusted relationships: Colleagues across Business Risk and the wider firm see the role as collaborative, curious and constructive, with appropriate challenge provided when needed.

Effective assurance support: Penetration testing, security and cyber resilience exercises, and other assurance activities are supported efficiently, with findings and actions captured accurately.

Growing future capability: Knowledge develops across information security, technology, data privacy, AI and emerging technologies, enabling the role to take on broader responsibility over time.

Your knowledge and experience

Information security, technology or other related risk qualifications are preferred. Applied knowledge of information security and/or technology, with an interest in developing this capability further in a risk‑management environment. Awareness of current information security and technology trends and an ability to consider their potential risk implications, including developments in AI and other emerging technologies. Ability to analyse information and evidence, form clear conclusions and communicate effectively with both technical and non‑technical stakeholders. Experience can have been gained through employment, study or other relevant practical exposure.

The type of candidate that we're looking for

We are looking for someone who is curious, analytical and keen to build their career in a broad and evolving area of risk. This role offers exposure to a wide range of information risks, including information and cyber security, technology, data privacy, AI and other emerging technologies, as well as the opportunity to contribute to assurance activity such as penetration testing and cyber resilience exercises. You will enjoy getting underneath an issue, understanding how risks and controls work in practice, and using information and evidence to form clear, well‑reasoned conclusions. Some technical knowledge of information security or technology would be valuable, as well as an interest in developing this capability to become comfortable engaging with technical colleagues and translating complex issues into clear risk insights. The role involves working with colleagues across Business Risk and the wider firm, so you will need to be a confident communicator who can build strong relationships, ask thoughtful questions and provide constructive challenge. You should be proactive, organised and willing to take ownership, with an interest in how new technologies such as AI are changing the firm and the risks and opportunities they create. We would particularly value someone who is keen to learn, broaden their experience and contribute ideas for improving how we assess, monitor and report risk. This would suit an individual who wants a role combining risk analysis, stakeholder engagement, emerging technology and practical assurance experience, with plenty of opportunity to develop their knowledge and responsibilities over time.

Critical skills

Nurture relationships

Adaptability

Openness & discernment

Team working

Closing Date

October 13, 2026

At Baillie Gifford, we are committed to fostering an inclusive and respectful culture in which each of our colleagues can thrive and develop. We believe that our clients are best served by a diverse workforce with the experiences, ideas and perspectives that this brings. If you are currently working at Baillie Gifford as an employee or contractor please apply to this job from the firm's Workday internal career site.

Baillie Gifford is an independent, private partnership, which allows us to focus entirely on our clients and their investments. It helps our stability, motivation and culture and enables us to take a long-term view on all that we do, including staff development, client relationships and investing. And just like with our investments, we’re good at spotting potential in our employees. Join us and we’ll actively support you to explore the possibilities of your career and interests. We’ll give you ongoing training and development, all to ensure you have valuable opportunities to grow your unique talents and pursue your goals. We’re also incredibly committed to the wellbeing of our employees. This is just a taste of our culture. One that was created by the partners who own and will work with you every day in the firm. People who are always on hand to hear your ideas and suggestions of how to make Baillie Gifford an even better place to be. So, if this sounds like somewhere you could realise your full potential, then our next investment could be you.

If you have any questions or issues regarding your application, please contact us at [e-mail].