Cyber & Data Security Risk Consultant

Edinburgh - Hybrid 50%
Salary: Around £55,000 with an up to 14% employer matching pension scheme

Our Client is seeking a Cyber & Data Security Risk Consultant to help shape and oversee the Group’s approach to cyber and data security risks. Sitting in the second line of defence, you’ll act as an expert advisor and independent challenger to senior leaders and the Board, ensuring that risk is understood managed.

• Lead independent, risk-based assurance and oversight of cyber and data security risk.

• Provide insight and challenge across key domains like IAM, endpoint security, incident response and more.

• Support enterprise-wide risk communication and reporting to drive good decisions and strong risk culture.

• Oversee frameworks for identifying, assessing, and reporting cyber and information risks..

• A solid grounding in cybersecurity (ideally in financial services), with exposure to key regulatory frameworks like GDPR or CCPA.

• Understanding of risk management principles, ideally within a 2nd line or governance function.

• Relevant industry certifications such as CISSP, CISM, CRISC, CDPSE, CompTIA Security+ or similar.

• Strong technical awareness across areas like application security, incident response, and data privacy.

• Excellent stakeholder engagement skills—you’ll work closely with leaders across the business.