Senior Cyber Security Risk Manager

Provntalent; City of Edinburgh; Hybrid; GBP 70,000 - 110,000; Full time

Job summary

Provntalent in Edinburgh is seeking an experienced Senior Cyber Security Risk Manager to lead cyber risk, assurance and security governance. The role covers risk assessment, control effectiveness, and security input into new technology initiatives within a regulated environment.

You will work with security leadership and technology teams to identify risks, evaluate controls, and support risk-based decisions while mentoring junior staff and coordinating external assurance activities.

Qualifications

• Proven ability to identify and manage cyber risk within a complex, regulated environment.
• Knowledge of security controls, incident response and risk management processes.
• Experience with enterprise security frameworks and governance activities.

Responsibilities

• Identify and assess cyber and technology risks across a complex enterprise environment.
• Review the effectiveness of security controls and recommend improvements.
• Provide security input into new technology initiatives, projects and solutions.
• Assess security risks and exceptions, helping stakeholders make informed risk-based decisions.
• Support the investigation and management of security incidents.
• Coordinate security testing and support remediation activity.
• Maintain cyber risk assessments and contribute to wider risk management activities.
• Communicate security risks and recommendations to senior stakeholders.

Skills

Cyber security risk management

Security governance

Stakeholder engagement

Security controls

Cloud security

Job description

Edinburgh | Hybrid

A well-established financial services organisation operating in the Investment Management world is looking for an experienced Senior Cyber Security Risk Manager to join its security function and take a leading role across cyber risk, assurance and security governance. Operating within a complex and regulated environment, the organisation continues to invest significantly in its technology and security capabilities. This is a broad position offering exposure across technical security, enterprise risk, security assurance and the assessment of new technology. You’ll work closely with security leadership, technology teams and stakeholders across the wider organisation to identify and assess security risks, evaluate the effectiveness of controls and help ensure technology is introduced and operated securely. The role would suit an experienced cyber security professional who combines strong technical security knowledge with practical risk management and stakeholder engagement skills.

Responsibilities

• Identify and assess cyber and technology risks across a complex enterprise environment
• Review the effectiveness of security controls and recommend improvements
• Provide security input into new technology initiatives, projects and solutions
• Assess security risks and exceptions, helping stakeholders make informed risk-based decisions
• Support the investigation and management of security incidents
• Assess security across areas including identity, endpoints, data protection and cloud technologies
• Perform security assessments of external suppliers and technology partners
• Coordinate security testing and support remediation activity
• Maintain cyber risk assessments and contribute to wider risk management activities
• Support internal and external assurance, audit and regulatory requirements
• Work with external security partners and specialist providers
• Contribute to security awareness and education across the organisation
• Provide guidance and support to other members of the security team
• Communicate security risks and recommendations to senior technical and business stakeholders

Requirements

• Strong experience across cyber security risk, assurance and security controls
• Good technical understanding of modern enterprise security environments
• Experience assessing security across identity, endpoint, data and cloud technologies
• Experience providing security input into new technology or business solutions
• Understanding of security incident investigation and response
• Knowledge of information protection and data security controls
• Experience working with recognised security frameworks and risk management processes
• Experience operating within complex or regulated organisations
• Strong communication and stakeholder management skills
• Ability to independently manage security and risk initiatives

Desirable

• CISSP, CISM, CRISC or equivalent security certification
• Experience within financial services or another regulated industry
• Exposure to cloud and hybrid technology environments
• Experience coordinating security testing or assurance exercises
• Experience mentoring or supporting other security professionals

Previous experience within a specific financial services sector is not essential.

This is an opportunity to take significant ownership across cyber security risk and assurance while working closely with senior stakeholders in an organisation continuing to invest in its security capability.

The position offers a competitive base salary and benefits package.