Senior Security Governance & Risk Leader

The Scottish Government; Glasgow; On-site; GBP 70,000 - 90,000; Full time

Job summary

Social Security Scotland is seeking a Senior Information and Cyber Security Officer to join the Digital Risk and Security branch. You will help drive the Security Risk and Assurance programme and strengthen governance, risk management, and compliance frameworks.

You will partner with the Cyber Security Risk and Assurance Manager to develop ISMS, apply ISO 27001, GDPR, and NIST 800-53, and provide clear, auditable security guidance across the organisation.

Qualifications

• Deep expertise in governance, risk management, and assurance using recognised standards and frameworks.
• Ability to identify, analyse and mitigate cyber risks with auditable decision-making.
• Lead policy, compliance and third‑party assurance activities; drive maturity of security frameworks.

Responsibilities

• Drive the Security Risk and Assurance programme.
• Strengthen governance, risk management, and compliance frameworks across the organisation.
• Engage stakeholders and influence security policy and third‑party assurance activities.
• Support incident response to contain and resolve threats.
• Contribute to security projects and raise security awareness across the organisation.

Skills

Governance

Risk management

ISMS

Stakeholder engagement

Security assurance

Incident response

Compliance

ISO 27001

NIST 800-53

GDPR

Job description

Social Security Scotland is seeking a Senior Information and Cyber Security Officer to join the Digital Risk and Security branch. You will help drive the Security Risk and Assurance programme and strengthen governance, risk management, and compliance frameworks.

You will partner with the Cyber Security Risk and Assurance Manager to develop ISMS, apply ISO 27001, GDPR, and NIST 800-53, and provide clear, auditable security guidance across the organisation.