Strategic Information Security Risk Advisor

Social Security Scotland; Glasgow; Hybrid; GBP 60,000 - 90,000; Full time

Job summary

Social Security Scotland is seeking a Security and Information Risk Advisor to drive information security risk management within the Digital Risk & Security branch. You will provide guidance on security strategies, conduct risk assessments, and contribute to policy development to safeguard critical information.

The role involves risk-based assurance reviews, managing remediation activities, and communicating complex security concepts to a range of stakeholders.

Qualifications

• Knowledge of information security standards (ISO/IEC 27001; NIST SP 800-53) and relevant laws (DPA 2018; GDPR).
• Ability to evaluate security controls and drive risk-based improvements across complex environments.

Responsibilities

• Conduct risk-based assurance reviews of internal solutions and third‑party suppliers.
• Manage complex risks, issues and remediation activities with appropriate risk mitigation.
• Design and review secure system architectures to achieve business outcomes.
• Assess vulnerabilities and evolving security technologies and recommend controls.
• Build and maintain stakeholder relationships and facilitate discussions on high‑risk matters.

Skills

ISO/IEC 27001

NIST SP 800-53

Risk assessment

Policy development

Stakeholder mgmt

Job description

Social Security Scotland is seeking a Security and Information Risk Advisor to drive information security risk management within the Digital Risk & Security branch. You will provide guidance on security strategies, conduct risk assessments, and contribute to policy development to safeguard critical information.

The role involves risk-based assurance reviews, managing remediation activities, and communicating complex security concepts to a range of stakeholders.