Senior Information and Cyber Security Officer

Work For Scotland; Glasgow, Dundee; Hybrid; GBP 65,000 - 90,000; Full time

Job summary

Social Security Scotland seeks a Senior Information and Cyber Security Officer to join the Digital Risk and Security branch and drive the Security Risk and Assurance programme across the organisation.

You will strengthen governance, risk management and compliance, partnering with the Cyber Security Risk and Assurance Manager to mature security capabilities and ISMS.

Qualifications

• Deep expertise in governance, risk management and assurance.
• Experience with security frameworks and compliance.
• Ability to influence stakeholders and lead assurance activities.

Responsibilities

• Apply governance, risk management and assurance using ISO 27001, NIST 800-53, GDPR and DPA 2018.
• Identify, analyse and mitigate cyber risks with clear, auditable recommendations.
• Engage stakeholders, lead policy, third-party assurance activities, and advance ISMS maturity.

Skills

Governance

Risk management

Information security

Compliance

Stakeholder engagement

Policy development

Job description

Are you ready to make a real impact in cyber security?We’relooking for an experienced Senior Information and Cyber Security Officer to join our Digital Risk and Security branch at Social Security Scotland. In this key role,you’llhelp drive our Security Risk and Assurance programme and strengthen our governance, risk management, and compliance frameworks.

You’llwork at the heart of our security function - partnering with the Cyber Security Risk and Assurance Manager and contributing to the ongoing development of our governance, risk, and compliance capabilities across the organisation.

The ideal candidate can:

• Apply deepexpertisein governance, risk management, and assurance, using ISO 27001, NIST 800-53, GDPR, and DPA 2018 to strengthen organisational security.
• Identify, analyse, and mitigate cyber risks, giving stakeholders clear, actionable advice that enables well‑informed, auditable decisions.
• Engage and influence stakeholders, lead policy, compliance, and third‑party assurance activities, and drive the maturity of security frameworks and the ISMS.
• Contribute to security projects, build security awareness across the organisation, and support incident response tocontainand resolve threats.