Strategic Information Security & Risk Advisor

Social Security Scotland; Glasgow; Hybrid; GBP 52,000 - 70,000; Full time

Benefits offered by this job

Hybrid working

GDD pay supplement

Job summary

Social Security Scotland is seeking a Security and Information Risk Advisor to guide information security risk management within our Digital Risk & Security team. You will advise on controls, conduct risk assessments, investigate breaches, and help shape policies and standards to ensure regulatory compliance.

The role emphasizes collaboration with stakeholders, delivering secure technical solutions, and contributing to a resilient security posture across Scotland's public services.

Qualifications

• Knowledge of information security standards (ISO/IEC 27001, NIST SP 800-53) and related legislation (DPA 2018, GDPR).
• Ability to assess effectiveness of controls and implement proportionate risk mitigations.
• Experience in risk-based assurance and working with stakeholders to improve security posture.

Responsibilities

• Conduct risk-based assurance reviews of internal solutions and third-party suppliers.
• Manage complex risks, issues, remediation activities, and lessons learned.
• Design and review secure system architectures to deliver strong business outcomes.
• Assess vulnerabilities and evolving security technologies and propose controls.
• Build relationships with stakeholders and communicate complex security concepts.
• Apply knowledge of policy, governance, and regulatory requirements to develop secure solutions.

Skills

ISO 27001

NIST SP 800-53

Risk assessment

Security policies

Stakeholder management

Job description

Social Security Scotland is seeking a Security and Information Risk Advisor to guide information security risk management within our Digital Risk & Security team. You will advise on controls, conduct risk assessments, investigate breaches, and help shape policies and standards to ensure regulatory compliance.

The role emphasizes collaboration with stakeholders, delivering secure technical solutions, and contributing to a resilient security posture across Scotland's public services.