Security and Information Risk Advisor
Role Overview
Security and Information Risk Advisor in the Digital Risk & Security branch, supporting protection of Social Security Scotland.
The role provides advice on specifying, implementing and operating cyber security controls and supports compliance with legislation, regulation and standards.
Key Skills for This Role
Full Job Posting
Role overview
Security and Information Risk Advisor in the Digital Risk & Security branch, supporting protection of Social Security Scotland.
The role provides advice on specifying, implementing and operating cyber security controls and supports compliance with legislation, regulation and standards.
Responsibilities
- Advise on security strategies and standards for managing identified risks.
- Use vulnerability information to assess security risks and business impacts for complex information systems.
- Investigate major security breaches and recommend control improvements.
- Contribute to information security policy, standards and guidelines.
- Apply information assurance and security policies to manage risk.
- Use control-testing information in information assurance assessments.
Experience and knowledge
- Knowledge of ISO/IEC 27001 and NIST SP 800-53, and understanding of the Data Protection Act 2018 and GDPR.
- Ability to apply standards and legal requirements to support compliance and integrate good practice.
- Experience evaluating technical, physical, procedural and personnel controls, recommending improvements, and working with stakeholders on proportionate mitigation.
Assessment
- The assessed Success Profile behaviours are communicating and influencing at Level 3 and delivering at pace at Level 3.
- Technical skills are assessed through a scenario-based exercise at interview stage.
Application process
- Applicants must submit a CV and a supporting statement of no more than 750 words addressing the assessed experience and behaviours.
- A sift may begin with the first experience criterion; a telephone interview may take place before the final interview.
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at The Scottish Government
SPM Lead Application Operations Engineer
Glasgow, GBR
Social Security Scotland is seeking a Lead Application Operations Engineer to provide technical leadership for its Cúram Case Management System and batch-processing services. The role leads incident response, service rel
Senior Data Analyst (Report Developer)
Glasgow, GBR
Social Security Scotland is seeking an experienced Senior Data Analyst to develop and support Power BI reporting solutions for operational and strategic decisions. The role leads dashboard development, reporting standard
Senior Assurance Manager
Aberdeen, GBR
Food Standards Scotland is seeking an experienced Environmental Health Officer or Food Safety Officer to support audit assurance and local authority delivery. The role involves third-country audit work, food safety enfor
Senior Data Analyst (Census)
Edinburgh, GBR
The Scottish Government is seeking a Senior Data Analyst to develop data models and analytical structures for Census 2031. Candidates should bring significant data analysis or statistics experience, advanced R or Python
Senior Data Analyst (Census)
Edinburgh, GBR
The National Records of Scotland is seeking a Senior Data Analyst to support Census 2031 by building data models, analytical structures, and transformation pipelines. Candidates need significant data analysis or statisti
Product Co-ordinator (Fixed Term Appointment)
Glasgow, GBR
Social Security Scotland is seeking Product Coordinators to support delivery across its Fraud, Error and Debt teams. The work includes planning, governance, reporting, stakeholder engagement, and delivery coordination; c
Business Analyst
Glasgow, GBR
Social Security Scotland is seeking a Business Analyst to connect business and technical stakeholders with cloud engineering teams delivering infrastructure and integration services. The role involves requirements analys
SPM Lead Application Operations Engineer
Glasgow, GBR
Senior Data Analyst (Report Developer)
Glasgow, GBR
Senior Assurance Manager
Aberdeen, GBR
Senior Data Analyst (Census)
Edinburgh, GBR
Senior Data Analyst (Census)
Edinburgh, GBR
Product Co-ordinator (Fixed Term Appointment)
Glasgow, GBR
Business Analyst
Glasgow, GBR