IT Security and Compliance Specialist

Cyber UK; City of Edinburgh; On-site; GBP 60,000 - 90,000; Full time

Job summary

Cyber UK in Edinburgh is seeking an Information Security and Compliance Specialist to manage the client's cyber security risk landscape and ensure robust IT security governance, risk management, and audit activity.

The role leads cyber security, risk, and compliance initiatives, drives governance, supports incident response, and provides security expertise across technology and business teams to maintain a strong security posture.

Qualifications

• Strong experience in Information Security, Cyber Security, or IT Security roles.
• Expertise in security risk management, governance, compliance, and audit activities.
• Knowledge of ISO 27001, NIST, HIPAA, and HITRUST.
• Experience with cloud, network, infrastructure and data security.
• Ability to manage security incidents, risk assessments, and regulatory requirements.
• Excellent communication with technical and non-technical stakeholders.

Responsibilities

• Lead cyber security, risk, and compliance initiatives.
• Drive governance, manage audits and risk assessments.
• Support incident response activities.
• Provide security expertise across technology and business teams.

Skills

Information Security

Cyber Security

IT Security

Security risk management

Governance

Audit activities

ISO 27001

NIST

HIPAA

HITRUST

Cloud security

Network security

Infrastructure security

Data security

Incident response

Job description

IT Security and Compliance SpecialistEdinburghHead Resourcing are working with a software services company in Edinburgh to hire an experienced Information Security and Compliance Specialist. In this position you will play a critical role in managing our client’s cyber security risk landscape and ensure robust IT cyber risk management, governance, and audit activities.To be successful in this role, you will ideally have came from a hands on technical background and have moved into a Cyber/Information security focussed role. This is an opportunity to lead cyber security, risk, and compliance initiatives, ensuring the organisation maintains a strong security posture. You’ll drive governance, manage audits and risk assessments, support incident response activities, and provide security expertise across technology and business teams.

Required skills and experience…

• Strong experience in Information Security, Cyber Security, or IT Security roles
• Proven expertise in security risk management, governance, compliance, and audit activities
• Good knowledge of frameworks such as ISO 27001, NIST, HIPAA, and HITRUST
• Experience across cloud, network, infrastructure, and data security environments
• Ability to manage security incidents, risk assessments, and regulatory requirements
• Excellent communication skills with the ability to engage technical and non-technical stakeholders