Information Security Assurance Specialist

abrdn plc; City of Edinburgh; Hybrid; GBP 40,000 - 60,000; Full time

Job summary

A leading wealth management firm is looking for an Information Security Assurance Specialist based in Edinburgh. This role focuses on ensuring that all information security controls are effective and meet regulatory obligations. The ideal candidate will have strong risk management skills and recognized professional qualifications in information security. The firm offers a supportive and inclusive workplace culture with extensive benefits including 40 days of annual leave and a 16% employer pension contribution.

Benefits

40 days annual leave

16% employer pension contribution

Private healthcare

Gym discounts

Employee discount portal

Qualifications

• Knowledge of control and risk management processes.
• Ability to frame recommendations and decisions in terms of risk.
• Recognized professional information security qualification(s) are advantageous.

Responsibilities

• Ensure appropriate information security controls are in place.
• Validate information security controls and report on effectiveness.
• Promote a positive risk culture across teams.

Skills

Control and risk management processes

Ability to frame recommendations in terms of risk

Excellent planning skills

Ability to multi-task

Education

Professional information security qualifications (e.g. Security+, CCSP)

Job description

Job Description

At Aberdeen, our ambition is to be the UK's leading Wealth & Investments group.

Strengthening talent and culture is one of our strategic priorities. We strive to make Aberdeen a great place to work so that we can attract and retain the industry's best talent.

Our people put our stakeholders at the heart of everything they do by helping us to make a positive difference to the lives of our clients, customers, colleagues, shareholders, and society.

We are focused on growing our direct and advised wealth platforms and repositioning our specialist asset management business to meet client demand. We are committed to providing excellent client service, supported by leading technology and talent.

Aberdeen comprises three businesses:

• interactive investor (ii), the UK's second largest direct‑to‑consumer investment platform, enables individuals in the UK to plan, save, and invest in the way that works for them.
• Our Adviser business provides financial planning solutions and technology for UK financial advisers, enabling them to create value for their customers.
• Our Investments business is a specialist asset manager that focuses on areas where we have both strength and scale to capitalise on the key themes shaping the market, through either public markets or alternative asset classes.

About the Department

As an Information Security Assurance Specialist, you will be part of a team responsible for engagement with our business to ensure information security is considered throughout their operations.

About the Role

You will ensure appropriate information security controls are in place that our meet legal, regulatory and contractual obligations; you'll also validate information security controls are working as intended, report on the information security risk posture with a drive to deliver continuous improvement.

Key Responsibilities

• Ensure our business is supported by Security and Resilience.
• Information and cyber security threats, risks and vulnerabilities are understood and managed by technology and business stakeholders within their business.
• Improve the security stance of Aberdeen through the continuous provision of reliable evidence to stakeholders through testing and reporting on the effectiveness of information security controls required to protect business assets and processes.
• Promote a positive risk culture via your engagement in ensuring Security, Resilience and our business teams understand the Enterprise Risk Management Framework and ICT Risk Management Framework as applied to Information Security.
• Ensure that external parties, including customers and clients, understand and are satisfied with our information and cyber security approach.

About the Candidate

• Knowledge of control and risk management processes.
• Ability to frame recommendations and decisions in terms of risk, balanced against business priorities.
• Ability to make risk judgements.
• Excellent planning skills, ability to multi‑task to meet specific targets and objectives.
• Recognised professional information security qualification(s) e.g. Security+, CCSP, CISMP, CISA, CISSP, etc. are advantageous but, not essential.

We are proud to be a Disability Confident Committed employer. If you have a disability and would like to apply to one of our UK roles under the Disability Confident Scheme, please notify us by completing the relevant section in our candidate questionnaire. One of our team will reach out to support you through your application process.

Our benefits

There's more to working life than coming home with a good salary. We have an environment where you can learn, get involved and be supported.

When you join us, your reward will be one of the best around. This includes 40 days' annual leave, a 16% employer pension contribution, a discretionary performance‑based bonus (where applicable), private healthcare and a range of flexible benefits – including gym discounts, season ticket loans and access to an employee discount portal. You can read more about our benefits here.

Our business

Enabling our clients to be better investors drives everything we do. Our business is structured around three distinct areas – our vectors of growth – focused on our clients' changing needs. You can find out more about what we do here.

An inclusive way of working

Whatever way you like to work, if you have the talent and commitment to join our team, we'd like to hear from you.

At Aberdeen we've adopted a 'blended working' approach. This approach combines the benefits of face‑to‑face collaboration, coaching and connecting in our offices with the flexibility of working from home. It enables colleagues to find a balance that works for their roles, their teams, our clients and our business.

An inclusive culture, where diverse perspectives drive our actions, is at the core of who we are and what we do. If you need assistance with your application, or a reasonable adjustment to your interview arrangements – for example, because you are neurodivergent, or have a physical, sensory, cognitive, mental, visible or invisible disability – please let us know and we’ll be happy to help.

We're committed to providing an inclusive workplace where all forms of difference are valued and which is free from any form of unfair or unlawful treatment.

We define diversity in its broadest sense – this includes but is not limited to our diversity of educational and professional backgrounds, experience, cognitive and neurodiversity, age, gender, gender identity, sexual orientation, disability, religion or belief and ethnicity and geographical provenance. We support a culture that values meritocracy, fairness and transparency and welcomes enquiries from everyone.

If you need assistance or an adjustment due to a disability please let us know as part of your application and we will assist.