Strategic Information Security Risk Advisor

Allscreens Nationwide Ltd; Dundee; On-site; GBP 55,000 - 75,000; Full time

Job summary

Social Security Scotland is seeking a Security and Information Risk Advisor to drive risk management for a vital public service. You will advise on security controls, conduct risk assessments, investigate significant breaches, and contribute to information security policies and guidelines.

The role focuses on compliance with legislation, regulation, and standards across the organisation. You will work with stakeholders to manage risks, develop secure architectures, and communicate complex risk

Qualifications

• Ability to provide advice on security strategies and risk treatment.
• Experience in conducting risk assessments and business impact analyses.
• Ability to interpret policies and apply security standards to complex systems.
• Strong written and verbal communication with diverse stakeholders.

Responsibilities

• Conduct risk-based assurance reviews of internal solutions and third‑party suppliers, identifying risks and recommending remediation.
• Manage complex risks, issues, remediation activities, and lessons learned.
• Design and review secure system architectures, applying security principles to deliver outcomes.
• Assess vulnerability impact and recommend appropriate responses and controls.
• Build stakeholder relationships, manage expectations, and facilitate discussions on high‑risk matters.
• Communicate complex technical and risk concepts to internal and external audiences.

Skills

Security risk assessment

Vulnerability management

Threat intelligence

Policy development

Stakeholder engagement

Security controls

Job description

Social Security Scotland is seeking a Security and Information Risk Advisor to drive risk management for a vital public service. You will advise on security controls, conduct risk assessments, investigate significant breaches, and contribute to information security policies and guidelines.

The role focuses on compliance with legislation, regulation, and standards across the organisation. You will work with stakeholders to manage risks, develop secure architectures, and communicate complex risk