Principal Cyber Security Analyst (IAM)

The Scottish Government; Glasgow; On-site; GBP 90,000 - 120,000; Full time

Job summary

The Scottish Government is seeking a Principal Cyber Security Analyst to lead Identity & Access Management (IAM) and shape the strategy for identity governance and access controls across government systems in Scotland.

You will supervise a team of IAM professionals, direct IAM strategy, and work with senior stakeholders to ensure authentication, authorisation, and MFA controls meet industry best practices in a cloud-first environment.

Qualifications

• Experience leading IAM teams and security professionals.
• Experience with identity governance and administration, PAM, MFA.
• Ability to shape IAM strategy and manage risk.
• Experience in cloud-first environments.

Responsibilities

• Lead IAM specialists and security professionals.
• Oversee identity lifecycle management and access governance.
• Provide strategic leadership across IGA, PAM, MFA.
• Influence senior stakeholders and align controls with best practices.

Skills

IAM

Identity Governance

PAM

MFA

Security leadership

Cloud security

Stakeholder engagement

Job description

Join Social Security Scotland as a Principal Cyber Security Analyst - Identity & Access Management (IAM) Manager and play a leading role in protecting the systems, services and information that support millions of people across Scotland.

As a senior leader within our Cyber Security function, you will lead a team of IAM specialists and security professionals responsible for delivering and continually improving the organisation's identity security capabilities. You will provide strategic leadership across Identity Governance and Administration (IGA), Privileged Access Management (PAM), identity lifecycle management, authentication and authorisation services, Multi-Factor Authentication (MFA), identity federation and access governance.

Working in a complex, cloud-first environment, you will shape IAM strategy, manage identity-related risk and ensure our security controls remain effective, resilient and aligned to industry best practice. This is an exciting opportunity to influence organisation-wide security decisions while helping to safeguard the delivery of Scotland's social security services.

Cyber Security Analysts protect the confidentiality, integrity and availability of government information and systems. They provide expert cyber security leadership, manage cyber threats and incident response, influence senior stakeholders, and deliver trusted advice on security controls and best practice. They also oversee cyber security operations, including team leadership, prioritisation, quality assurance, budgeting, recruitment and capability development.