Security and Information Risk Advisor

Work For Scotland; Glasgow, Dundee; Hybrid; GBP 50,000 - 75,000; Full time

Job summary

Work For Scotland in Scotland is seeking a Security and Information Risk Advisor to guide the specification, implementation and operation of cyber security controls across essential public services.

You will work with a range of stakeholders to perform risk assessments, investigate breaches and contribute to the development of information security policies and standards, ensuring compliance with legislation and relevant standards.

Qualifications

• Provide advice on security strategies to manage identified risks and ensure adherence to standards.
• Obtain and act on vulnerability information and conduct risk assessments on complex systems.
• Investigate major security breaches and recommend control improvements.
• Contribute to information security policy, standards and guidelines.
• Interpret information assurance policies and apply them to manage risks.
• Use testing information to support information assurance assessments.

Responsibilities

• Provide advice and guidance on security strategies to manage identified risks and ensure adoption and adherence to standards.
• Obtain and act on vulnerability information and conduct security risk assessments and business impact analyses on complex information systems.
• Investigate major security breaches and recommend appropriate control improvements.
• Contribute to development of information security policy, standards and guidelines.
• Interpret information assurance and security policies and apply these to manage risks.
• Use control testing information to support information assurance assessments.

Skills

Security risk assessment

Vulnerability management

Incident investigation

Policy development

Job description

Are you ready to drive effective information security risk management for a vital public service? Join us as a Security and Information Risk Advisor within our Digital Risk & Security branch, where your expertise will guide our commitment to protecting Social Security Scotland. If you are passionate about cyber security and have a keen interest in safeguarding critical information,

As a Security and Information Risk Advisor, you will play a pivotal role in providing advice and guidance on the effective specification, implementation, and operation of cyber security controls. Collaborating closely with various stakeholders, you will conduct security risk assessments, investigate major breaches, and contribute to the development of information security policies, standards, and guidelines. This is a key technical position within Digital Risk & Security, focusing on ensuring compliance with legislation, regulation, and relevant standards.

Typical role level expectations:

• Provide advice and guidance on security strategies to manage identified risks and ensure adoption and adherence to standards.
• Obtain and act on vulnerability information and conduct security risk assessments and business impact analyses on complex information systems.
• Investigate major security breaches and recommend appropriate control improvements.
• Contribute to development of information security policy, standards and guidelines.
• Interpret information assurance and security policies and apply these to manage risks.
• Use control testing information to support information assurance assessments.