Information & network security occupations Work, Jobs in Scotland (with Salaries)

Lead Information Security Analyst, GRC
Cirrus Logic —Edinburgh
- Full-time
- Hybrid work
- Analysis skills
- Bachelor's degree
- In-person
- Work from home
Security and Information Risk Advisor
The Scottish Government —Glasgow
- Full-time
- Hybrid work
- Presentation skills
3d
Operational Technology Cyber Security Consultant (All Levels)
Amentum —Helensburgh
- Full-time
- Business development
- Travel
- Communication skills
- Employee assistance programme
Security and Information Risk Advisor
Social Security Scotland —Glasgow
- £39,767 - £45,472 a year
- Full-time
- Presentation skills
- Annual leave
- Employee assistance programme
3d
IT Officer (Cyber Security)
Dundee City Council —Dundee
- £39,859 - £54,598 a year
- Organisational skills
- IT
- Communication skills
14d
Cyber Security Specialist
Capgemini —Inverness
- Monday to Friday
- Hybrid work
- Communication skills
Senior Information Security Analyst
Cirrus Logic —Edinburgh
- Full-time
- Hybrid work
- Bachelor's degree
- Communication skills
13d
Associate AI Security Specialist
Lloyds Banking Group —Edinburgh
- £48,987 - £66,000 a year
- Full-time
- Hybrid work
- Computer Science
- Analysis skills
- Machine learning
2d
Cyber Security Analyst
Scottish Government —Glasgow
- £62,111 - £77,439 a year
- Full-time
- Presentation skills
Security Services Engineer I (UK)
Corero —Edinburgh
- Weekend availability
- Hybrid work
- Scripting
- Annual leave
- Life insurance
Cyber Security Specialist
F5 —Inverness
- £45,000 - £55,000 a year
- Full-time
- In-person
- Leadership
- Communication skills
- Employee discount
- Life insurance
Quick apply
4d
Security and Fraud Technology Specialist
NCR Atleos —Dundee
- £64,000 - £80,000 a year
- Hybrid work
- Computer Science
- Engineering
- Communication skills
- Employee assistance programme
Quick apply
Join the Growing Cyber Security Practice at Methods
Methods Business and Digital Technology —Edinburgh
- Full-time
- Hybrid work
- Annual leave
- Employee assistance programme
Quick apply
Security Operations & GRC Manager
AccessFintech —Glasgow
- Full-time
- Hybrid work
- AWS
- Scripting
- Communication skills
Quick apply
Identity Security Engineer - SailPoint, Associate
BlackRock Investments —Edinburgh
- Hybrid work
- In-person
- Work from home
Cyber Security Operations Analyst - 12 Month FTC
Ashurst LLP —Glasgow
- Full-time
- Hybrid work
- Communication skills
AI Security Specialist
Lloyds Banking Group —Edinburgh
- £72,702 - £80,780 a year
- Full-time
- Hybrid work
- Machine learning
- Organisational skills
- AI
Information Security & Data Governance Lead (UK)
SES Energy —Aberdeen
- Full-time
- Hybrid work
- Continuous improvement
Quick apply
Identity Security Engineering - SailPoint, Vice President
BlackRock Investments —Edinburgh
- Hybrid work
- In-person
- Communication skills
- Work from home
Security Consultant
M&G plc —Edinburgh
- Full-time
- Writing skills
- Master's degree
- Bachelor's degree
- Annual leave
11d

I want to receive the latest job alerts for information & network security occupations in scotland

By signing in to your account, you agree to SimplyHired's Terms of Service and consent to our Cookie and Privacy Policy.

Explore jobs in more locations

information & network security occupations jobs near scotland

Lead Information Security Analyst, GRC

Cirrus Logic -
Edinburgh

Apply Now

Job details

Full-time

Benefits

Work from home

Qualifications

Stakeholder collaboration
Conduct risk analysis
CISSP
CISM
Analysis skills
Bachelor's degree
NIST standards
Risk management
ISO 27001
Multidisciplinary collaboration
Cybersecurity
Cyber security risk management
AI
Communication skills
CRISC
IT governance and compliance strategy
Corporate regulatory compliance oversight
Cybersecurity compliance and governance strategy development

Full job description

For over four decades, Cirrus Logic has been propelled by the top engineers in mixed-signal processing. Our rockstar team thrives on solving complex challenges with innovative end-user solutions for the world's top consumer brands. Cirrus Logic is also known for its award-winning culture, built on a foundation of inclusion and fairness, meaningful community engagement, and delivering enjoyable employee experiences at every turn. But we couldn’t do it without our extraordinary workforce – and that’s where you come in. Join our team and help us continue to make Cirrus Logic an exceptional place to grow your career!

We are seeking a highly motivated, experienced professional to join the Cirrus Logic Information Security team as a Lead Information Security Analyst - Governance, Risk Management, & Compliance (GRC).

You will be responsible for designing, operating, and continually improving our ISO 27001–aligned governance, risk, and compliance program, with a strong focus on Integrated Risk Management, Third Party Risk Management, and security control effectiveness. You will also help define, refine, and operationalise the responsible use of AI technologies and services (including GenAI and Agentic AI) across the enterprise from a security and risk perspective. This role is highly collaborative and supports business strategy in a dynamic, engineering driven environment.

Key Responsibilities:

GRC Program & ISO 27001: Lead day‑to‑day operation and continuous improvement of our ISO 27001–aligned Information Security Management System (ISMS), including policies, standards, and control procedures across the organization.
Policy, Standards, and Exception Management: Develop, maintain, and socialise information security policies, standards, and guidelines; manage exceptions, ensuring decisions are risk‑based, documented, and periodically reviewed.
Integrated Risk Management: Lead security risk and control assessments for new systems, services, and business initiatives, partnering with Security, IT, and business owners to identify threats, evaluate the design and operating effectiveness of controls, and document and track risk treatment plans. This includes evaluating AI/ML use cases (internal builds and third-party services) for security, data protection, and misuse risks.
Third‑Party Risk Management: Plan and execute third‑party risk assessments for suppliers and service providers, including review of third-party security questionnaires, trust documents, and remediation plans to ensure third-party security meets Cirrus Logic’s requirements.
Risk Analysis & Reporting: Analyze risks across technologies and business processes, prioritize remediation efforts based on business impact and likelihood, and prepare clear risk and control status reports for security leadership and key stakeholders.
GRC Tooling & Automation: Configure, administer, and optimize GRC tooling, such as ServiceNow GRC or OneTrust GRC, to support risk registers, control libraries, assessments, exceptions, and third-party workflows, including integration with IT and security platforms where appropriate.
Audit & Assessment Support: Coordinate and provide evidence for internal and external audits, customer security assessments, and certifications (e.g., ISO 27001, SOC‑related reviews), ensuring consistent, high‑quality responses.
Privacy & Regulatory Support: Partner with Legal, HR, and other stakeholders to identify and manage security‑related privacy and regulatory obligations; support privacy risk assessments and data protection controls as needed. Work with these stakeholders to assess privacy and data protection implications of AI/ML solutions, including data ingestion, training, and model outputs.
AI Risk & Governance: Define and maintain security and risk guardrails for the use of AI/ML technologies, including acceptable-use guidelines, control requirements, and review processes for new AI use cases and vendors.
Collaboration & Enablement: Act as a trusted advisor to the team members, IT, and business teams, helping translate security and risk requirements into practical, implementable solutions that align with engineering and operational realities. Partner closely with IT, engineering, and business teams to embed security, risk, and governance requirements into AI solution design and operations. Work effectively with a globally dispersed team across various time zones that Cirrus operates in.
Communication, Executive Presence & Awareness: Strong executive presence with outstanding written, verbal, and presentation skills. Ability to communicate complex risk, control, compliance, and program matters clearly and credibly to technical teams, business stakeholders, and executive leadership. Proven capability to develop high-quality executive-ready content, including presentations, briefings, and status updates that drive informed decision-making. Support and contribute to GRC awareness, communications, and training initiatives, including targeted awareness on the secure and responsible use of authorised AI tools.

Required Skills and Qualifications:

Proven experience in Information Security with a strong focus on GRC, risk management, and/or security compliance in a global environment.
Bachelor’s degree in cybersecurity, information systems, or a related field, or demonstrated equivalent experience as a security professional in a globally dispersed enterprise.
Hands‑on experience with ISO/IEC 27001 (ISMS lifecycle, Annex A controls, risk assessment and treatment) and related security control frameworks (e.g., NIST CSF, ISO 27000, TISAX, etc.).
Demonstrated experience with Integration Risk Management (project/solution risk assessments) and Third‑Party Risk Management (vendor due diligence, ongoing monitoring, and remediation).
Technical fluency across core IT and security domains (e.g., network, endpoint, identity, cloud/SaaS, logging/monitoring) and experience working with Security Engineering, Security Operations, and IT teams.
Experience configuring and maintaining an enterprise-grade GRC platform, preferably ServiceNow GRC, for risk, control, assessment, and exception workflows.
Strong analytical and problem‑solving skills, with the ability to balance security, compliance, and business objectives in a practical way.
Effective communication and interpersonal skills, with the ability to clearly convey risk and technical issues to both technical and non‑technical stakeholders, including senior leaders.
Proven ability to drive work independently, manage multiple concurrent initiatives, and follow through to completion in a fast‑paced environment.
Experience working in high‑tech, engineering, or semiconductor environments is beneficial.
Relevant certifications (e.g., ISO 27001 Lead Implementer/Lead Auditor, CISSP, CISM, CISA, CRISC) are preferred but not required.

This position is based in our Edinburgh office. It is a hybrid role (minimum 2+ days onsite) with the flexibility to work from home, depending on business needs. Candidates must live within a commutable distance or be willing to relocate.

#LI-HD1

#LI-Hybrid

Export control restrictions based upon applicable laws and regulations would prohibit candidates who are nationals of certain embargoed countries from working in this position without Cirrus Logic first obtaining an export license. Candidates for this role must be able to access technical data without a requirement for an export license. We are unable to sponsor or obtain export licenses for this role.

At Cirrus Logic, we believe that diversity drives innovation, and we are committed to encouraging an open and collaborative culture where different approaches, ideas, and points of view are respected and valued. We aim to promote a workplace where everyone can contribute irrespective of race, colour, national origin, religion or belief, gender or gender identity, sexual orientation, age, marital status, pregnancy status, or disability.

Apply Now

Refine Your Search

information & network security occupations jobs in scotland

Lead Information Security Analyst, GRC

Security and Information Risk Advisor

Operational Technology Cyber Security Consultant (All Levels)

Security and Information Risk Advisor

IT Officer (Cyber Security)

Cyber Security Specialist

Senior Information Security Analyst

Associate AI Security Specialist

Cyber Security Analyst

Security Services Engineer I (UK)

Cyber Security Specialist

Security and Fraud Technology Specialist

Join the Growing Cyber Security Practice at Methods

Security Operations & GRC Manager

Identity Security Engineer - SailPoint, Associate

Cyber Security Operations Analyst - 12 Month FTC

AI Security Specialist

Information Security & Data Governance Lead (UK)

Identity Security Engineering - SailPoint, Vice President

Security Consultant

I want to receive the latest job alerts for information & network security occupations in scotland

Related Searches

Explore jobs in more locations

Key Responsibilities:

Required Skills and Qualifications:

#LI-HD1

#LI-Hybrid

Jobseeker tools

Employer Tools

Browse

Stay Connected