Senior Cyber Security Risk Manager in Edinburgh

Edinburgh | Hybrid br/ br/ A well-established financial services organisation operating in the Investment Management world is looking for an experienced br/ br/ Senior Cyber Security Risk Manager br/ br/ to join its security function and take a leading role across cyber risk, assurance and security governance. Operating within a complex and regulated environment, the organisation continues to invest significantly in its technology and security capabilities. This is a broad position offering exposure across technical security, enterprise risk, security assurance and the assessment of new technology. You’ll work closely with security leadership, technology teams and stakeholders across the wider organisation to identify and assess security risks, evaluate the effectiveness of controls and help ensure technology is introduced and operated securely. The role would suit an experienced cyber security professional who combines br/ br/ strong technical security knowledge with practical risk management and stakeholder engagement skills . br/ br/ Responsibilities br/ br/ Identify and assess cyber and technology risks across a complex enterprise environment br/ br/ Review the effectiveness of security controls and recommend improvements br/ br/ Provide security input into new technology initiatives, projects and solutions br/ br/ Assess security risks and exceptions, helping stakeholders make informed risk-based decisions br/ br/ Support the investigation and management of security incidents br/ br/ Assess security across areas including identity, endpoints, data protection and cloud technologies br/ br/ Perform security assessments of external suppliers and technology partners br/ br/ Coordinate security testing and support remediation activity br/ br/ Maintain cyber risk assessments and contribute to wider risk management activities br/ br/ Support internal and external assurance, audit and regulatory requirements br/ br/ Work with external security partners and specialist providers br/ br/ Contribute to security awareness and education across the organisation br/ br/ Provide guidance and support to other members of the security team br/ br/ Communicate security risks and recommendations to senior technical and business stakeholders br/ br/ Requirements br/ br/ Strong experience across br/ br/ cyber security risk, assurance and security controls br/ br/ Good technical understanding of modern enterprise security environments br/ br/ Experience assessing security across identity, endpoint, data and cloud technologies br/ br/ Experience providing security input into new technology or business solutions br/ br/ Understanding of security incident investigation and response br/ br/ Knowledge of information protection and data security controls br/ br/ Experience working with recognised security frameworks and risk management processes br/ br/ Experience operating within complex or regulated organisations br/ br/ Strong communication and stakeholder management skills br/ br/ Ability to independently manage security and risk initiatives br/ br/ Desirable br/ br/ CISSP, CISM, CRISC or equivalent security certification br/ br/ Experience within financial services or another regulated industry br/ br/ Exposure to cloud and hybrid technology environments br/ br/ Experience coordinating security testing or assurance exercises br/ br/ Experience mentoring or supporting other security professionals br/ br/ Previous experience within a specific financial services sector is br/ br/ not essential . br/ br/ This is an opportunity to take significant ownership across cyber security risk and assurance while working closely with senior stakeholders in an organisation continuing to invest in its security capability. br/ br/ The position offers a competitive base salary and benefits package. br/ br/ #J-18808-Ljbffr