Enterprise Security Risk Manager

Edinburgh 65,000 - 70,000 + Excellent Benefits
An established Edinburgh-based investment organisation is seeking an experienced Enterprise Security Risk Manager to help shape and strengthen its cyber security posture.
Working closely with senior technology and business stakeholders, you'll be responsible for assessing cyber risk, driving security assurance activities, leading investigations, reviewing technology and AI solutions, and ensuring effective security controls are embedded across the organisation.
This is a highly visible role that combines hands-on technical security expertise with strategic risk management and stakeholder engagement.
What you'll be doing:

• Assessing cyber risks, control effectiveness and emerging threat intelligence
• Reviewing security designs for technology change, cloud services and business-led solutions
• Leading security investigations, threat hunting and incident response activities
• Managing penetration testing, attack simulations and remediation programmes
• Evaluating security controls across identity, endpoint, cloud, data protection and email security
• Conducting third-party and AI security due diligence
• Supporting audit, cyber insurance and regulatory assurance activities
• Delivering security awareness initiatives and stakeholder training
• Advising senior leaders on security risks and recommended actions

What we're looking for:

• Strong experience in cyber risk assessment, security assurance and control evaluation
• Expertise across Microsoft security technologies, including Entra ID, Defender and Purview
• Experience reviewing security architecture and technology change initiatives
• Proven incident investigation and threat hunting capability
• Knowledge of security standards, risk frameworks and audit processes
• Excellent communication skills with the ability to influence technical and non-technical stakeholders

Why apply? This is an opportunity to join a respected investment organisation where security is a genuine business priority. You'll work on a diverse range of security, risk and assurance challenges while helping shape the future security strategy of a highly successful business.
Interested? Contact us for a confidential discussion.