Edinburgh, Scotland, United Kingdom Hybrid / WFH Options
Venesky Brown
Venesky-Brown’s client, a public sector organisation in Edinburgh, is currently looking to recruit a Security Risk Specialist for an initial 12 month contract with option to extend on a rate of £500-£550/day (Outside IR35). This role will be based onsite in Edinburgh - home … subject to attendance where needed. Responsibilities: - Be aware of the current cyber threat landscape and industry best practices and standards. - Support initial scoping and risk assessment of a change project. - Interpret security best practice and accreditation requirements to assess security posture - Understand existing cyber security standards and controls to … assess security posture - Carry out risk assessments and threat modelling - Review high- and low-level designs to identify risk. - Develop riskmanagement processes to ensure risk data is captured and maintained. - Interpret vulnerability scan and pen test output and capture in riskmanagement processes more »
founded on positive change and development. Summary of the role This role can be based in either Edinburgh, Peterborough, Bristol, Basingstoke, Reading As a Risk Manager, you will be responsible for supporting the Head of Enterprise Risk in providing oversight of risks that impact the business. As part … of the Corporate Risk team, you will work closely with senior managers across IT, Finance, Commercial, HR, Internal Audit, and Line 2 functions to manage and mitigate key risks. This is a critical role in helping the business achieve its strategic and financial objectives, where your leadership in managing … to find out about our other benefits What you'll be doing Support the Head of Function on functional engagement from a Line 2 risk perspective to ensure the riskmanagement policy is properly Embedded Review and challenge the effectiveness of governance mechanisms deployed by the relevant more »
Oversee security monitoring processes, including proactive threat detection, intrusion prevention, and incident response. Lead investigations into security breaches and recommend corrective actions. Identity & Access Management (IAM) : Implement and maintain robust IAM strategies including role-based access control, multi-factor authentication, and secure Application Programmable Interfaces - API access across cloud … environments. Compliance & RiskManagement : Ensure the organisation meets compliance standards such as ISO 27001, General Data Protection Regulation - GDPR, Network Information Systems Regulations – NIS and others, conducting risk assessments and vulnerability audits regularly. Network Security : Design and implement network security controls such as firewalls, Virtual Private Networks … to date with the latest cloud and security trends, threats, vulnerabilities, and technologies, applying that knowledge to improve the organisation’s security posture. Project Management : Oversee cloud and security projects from conception to completion, ensuring timely delivery and alignment with business objectives. Stakeholder Engagement : Collaborate with internal and external more »
key risks. You’ll also be assessing technology risks and controls and undertaking testing, effectively contributing to continuous monitoring by analysing MI or reviewing risk information. On top of this, you’ll be contributing to discussions in order to influence the prudent management of risk, as well … as leading small audit engagements, to produce effective engagement reports and opinions which successfully influence business managers to manage risk prudently within their risk appetite. You’ll also be: Delivering elements of a regular or complex audit engagement Contributing to assurance planning and undertaking effective process mapping Coaching … ll have worked in a technology environment and have a strong interest in both current and emerging technologies. You’ll bring audit, assurance or riskmanagement experience and strong analytical and problem solving abilities as well as the ability to assess and prioritise data effectively. You’ll also more »