Principal Cyber Security Analyst (IAM)

Work For Scotland; Glasgow, Dundee; Hybrid; GBP 90,000 - 130,000; Full time

Job summary

Social Security Scotland is seeking a Principal Cyber Security Analyst – Identity & Access Management (IAM) Manager to lead the IAM team protecting Scotland's services.

You will shape IAM strategy across IGA, PAM, MFA and identity lifecycle, in a cloud-first environment, guiding risk, governance and secure authentication across government systems.

Qualifications

• Experience leading IAM teams and defining identity security roadmaps.
• Strong knowledge of IGA, PAM, MFA, and identity lifecycle management.
• Proven ability to govern authentication and authorization services within complex environments.

Responsibilities

• Lead and develop the IAM team, setting priorities and delivering improvements.
• Shape IAM strategy across governance, PAM, MFA and identity lifecycle management.
• Oversee risk management, controls, and compliance with best practice standards.
• Collaborate with senior stakeholders to align security decisions with delivery goals.

Skills

IAM Leadership

IGA Strategy

PAM

MFA

Identity Governance

Job description

Join Social Security Scotland as a Principal Cyber Security Analyst - Identity & Access Management (IAM) Manager and play a leading role in protecting the systems, services and information that support millions of people across Scotland.

As a senior leader within our Cyber Security function, you will lead a team of IAM specialists and security professionals responsible for delivering and continually improving the organisation's identity security capabilities. You will provide strategic leadership across Identity Governance and Administration (IGA), Privileged Access Management (PAM), identity lifecycle management, authentication and authorisation services, Multi-Factor Authentication (MFA), identity federation and access governance.

Working in a complex, cloud-first environment, you will shape IAM strategy, manage identity-related risk and ensure our security controls remain effective, resilient and aligned to industry best practice. This is an exciting opportunity to influence organisation-wide security decisions while helping to safeguard the delivery of Scotland's social security services.

Cyber Security Analysts protect the confidentiality, integrity and availability of government information and systems. They provide expert cyber security leadership, manage cyber threats and incident response, influence senior stakeholders, and deliver trusted advice on security controls and best practice. They also oversee cyber security operations, including team leadership, prioritisation, quality assurance, budgeting, recruitment and capability development.