Cyber Security Risk Manager - 3 month initial contract
- Edinburgh
- Contract
- Full-time
𝗟𝗼𝗰𝗮𝘁𝗶𝗼𝗻: 𝗘𝗱𝗶𝗻𝗯𝘂𝗿𝗴𝗵 (𝗵𝘆𝗯𝗿𝗶𝗱) / 𝟮 𝗱𝗮𝘆𝘀 𝗼𝗻-𝘀𝗶𝘁𝗲
𝗢𝘂𝘁𝘀𝗶𝗱𝗲 𝗜𝗥𝟯𝟱
𝗠𝗮𝗿𝗸𝗲𝘁 𝗿𝗮𝘁𝗲𝘀
𝟯 𝗺𝗼𝗻𝘁𝗵 𝗶𝗻𝗶𝘁𝗶𝗮𝗹 𝗱𝘂𝗿𝗮𝘁𝗶𝗼𝗻I'm currently recruiting for a highly skilled 𝗖𝘆𝗯𝗲𝗿 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗥𝗶𝘀𝗸 𝗠𝗮𝗻𝗮𝗴𝗲𝗿 to lead the development and implementation of a cyber risk management programme.Key Responsibilities
- Design and deliver a robust cyber security risk management framework.
- Conduct regular risk and vulnerability assessments
- Work collaboratively across departments to define risk tolerance and align with strategic objectives.
- Analyse cyber security data to identify risks and recommend mitigation strategies.
- Maintain comprehensive risk documentation, including registers, impact analyses and treatment plans.
- Communicate risk insights and recommendations clearly to stakeholders.
- Develop and monitor key risk indicators (KRIs) and key performance indicators (KPIs).
- Support project teams in embedding risk management throughout project lifecycle.
- Collaborate with internal and external partners to enhance incident response and cyber resilience.
- Experience in a cyber security risk management role.
- Strong understanding of cyber security frameworks and standards (ISO 27001, SOC2, NIST, GDPR).
- Excellent analytical, communication, and stakeholder engagement skills.
- Proficient in risk assessment tools and methodologies.
- Professional certifications such as CRISC, CISM or CISSP are desirable.