Cyber Risk and Compliance Lead

6 months ago

Manchester, United Kingdom SCOTTISH FUNDING COUNCIL Full time

**Cyber Risk & Compliance Lead**
**12 Month FTC**
**Edinburgh/Hybrid**:

- **£61,626 - £72,684**_

Everything we do at the Scottish Funding Council (SFC) aims to create the right environment for colleges and universities to thrive.

The Scottish Funding Council is Scotland’s tertiary education and research authority. Our ambition is to make Scotland an outstanding place to learn, educate, research, and innovate - now and for the future. So, naturally, we have a clear focus on recruiting the best people and developing them throughout their career. We invest around £2 billion every year, and our funding enables colleges and universities to provide life-changing opportunities for over half a million people. 

We’re not only looking for the best people to come and work for us, but also people who will connect with our guiding principles which include working in partnership, championing diversity, and supporting sustainability for future generations.

By fostering our guiding principles, we are very proud of the inclusive working environment that we have created. We are committed to attracting people of all backgrounds: we want our colleague base to reflect the people and communities that we serve.

**Job Summary**

As the Cyber Risk & Compliance Lead at the Scottish Funding Council, you will champion our cybersecurity initiatives, ensuring the protection of our operations, data and technologies in alignment with UK-specific cybersecurity standards and frameworks. This role is critical in maintaining the SFC’s reputation for excellence and integrity in the funding of education and research across Scotland.

**Key Responsibilities**
- Develop and implement a cyber risk management framework tailored to the specific needs and challenges of the SFC, focusing on the protection of financial data, personal information of students and staff, and sensitive research data.
- Ensure full compliance with Scottish and UK data protection laws, as well as adherence to specific regulations relevant to our organisation and our internal and external audit obligations.
- Collaborate closely with academic institutions, research bodies, and government agencies to align cyber security practices and foster a culture of shared responsibility and leading practices in data protection and risk management.
- Lead the review and enhancement of policies, procedures, and controls governing data security, risk assessment, and compliance within the funding council’s operations.
- Conduct targeted cyber risk assessments and compliance audits, providing strategic insights and recommendations to the SFC’s senior management and governing board.
- Act as a principal advisor on cyber security matters, offering expert guidance to support the council’s strategic initiatives in funding education and research.
- Stay abreast of emerging cyber threats and advancements in cyber security technologies and practices, ensuring the SFC remains proactive and responsive in its cyber risk and compliance strategies.

**Person specification**

**It is important through your CV / Cover Letter that you give evidence of proven experience of each of the following essential criteria**:
**Essential Requirements**:

- Proven track record in cybersecurity risk management, with a strong understanding of the UK cybersecurity landscape, including Cyber Essentials, ISO 27001 frameworks.
- Familiarity with the NCSC’s guidelines and recommendations for public sector organisations.
- Experience in managing cybersecurity compliance projects within the UK, including the attainment of Cyber Essentials certification.
- Leadership experience with the ability to mentor a team and drive cybersecurity awareness across an organisation.
- Excellent communication and influencing skills, capable of engaging effectively with a range of stakeholders on complex cybersecurity issues to ensure change is adopted and sustained.

**Professional Certifications**:

- Holding or working towards UK-recognized cybersecurity certifications, such as those offered by CREST or Cyber Essentials Plus, is highly desirable.
- Additional certifications such as CISSP, CISM, or ISO 27001 Lead Auditor/Implementer would be beneficial.

**Additional information**

**Location**
SFC offers hybrid working for its employees. This means that whilst the role is based at our Edinburgh office, there is substantial opportunity to work from home most of the time. As a rule of thumb SFC expects that a minimum of three days a month in the office (on average) will achieve the benefits of its hybrid approach, however it is for the employee and their line manager to agree the balance between home and workplace working - determined primarily by business need. Please be aware that this role can only be worked from within the UK and not overseas. Relocation expenses are not available.

**Key Rewards and Benefits**
- Normal full-time hours of work are 35 per week. We will consider flexible working arrangements. A flex

  • Cyber Security Consultant

    6 months ago

    Manchester, United Kingdom Cyber Security Specialists Full time

    **Cyber Security Consultant** Based in Manchester UK, we are an independent Cyber Security Consultancy providing Security Consultancy and Managed Security services across a wide range of markets, from multi-national Corporate Organisations and Government Agencies, through to smaller Businesses that want to develop strong security strategies. We are a UK...

  • Compliance Risk Manager

    4 weeks ago

    Manchester, United Kingdom Corecruitment International Full time

    Compliance Manager RoleThe Role: Compliance ManagerLocation: UKSalary: £70,000paSector: LegalOur client is an international group providing services to blue-chip clients. To support their internal Risk Management team, we are seeking a well-experienced Compliance Manager.You will join a collaborative and supportive team, working on various areas within...

  • Operational Cyber Security Expert

    2 weeks ago

    Manchester, United Kingdom Cyber Security Jobsite Full time

    We are seeking an experienced Operational Cyber Security Expert to join our team in Manchester, UK. This is a fantastic opportunity to work with a leading cyber defence company and contribute to the development of our Operational Cyber practice.About the RoleThe successful candidate will have a strong background in software development, with experience in...

  • Cyber Security and Compliance Expert

    6 days ago

    Manchester, United Kingdom Manchester City Council Full time

    About Manchester City CouncilJob OverviewWe are seeking an experienced ICT Risk and Compliance Manager to join our dynamic Cyber Security team. As a key member of the team, you will play a vital role in supporting and protecting the Council.Key ResponsibilitiesDevelop and implement comprehensive compliance strategies that align with local government,...

  • Cyber Security Engineer

    1 month ago

    Manchester, United Kingdom Iceberg Cyber Security Full time £83,000

    Job Title: Cyber Security Engineer - Service Now ExpertWe are seeking a highly skilled Cyber Security Engineer to join our team at Iceberg Cyber Security. As a VP level Security Engineer, you will be responsible for leading our security engineering team and developing innovative solutions to protect our clients\u2019 data.Key Responsibilities:* Develop and...

  • Cyber Security Lead

    1 week ago

    Manchester, United Kingdom Ministry of Housing, Communities and Local Government Full time

    Join the Ministry of Housing, Communities and Local Government as a Cyber Security Lead.About the RoleWe are seeking an experienced Cyber Security Lead to join our team in the Digital Directorate. As a key member of our Cyber Security team, you will be responsible for providing expert advice and guidance on cyber security matters to the department.Your...

  • Senior Risk and Compliance Professional

    4 weeks ago

    Greater Manchester, United Kingdom AJ FOX COMPLIANCE Full time

    {'heading': 'Job Description', 'subheading': 'Senior Risk & Compliance Lawyer', 'paragraphs': ['AJ FOX COMPLIANCE is seeking a Senior Risk & Compliance Lawyer to join their Risk & Compliance team in Manchester.', 'The ideal candidate has background experience in law firm regulation, complaints handling, or commercial contracts.', 'Responsibilities include...

  • Postdoctoral Cyber Risk Analyst

    4 days ago

    Manchester, United Kingdom The University of Manchester Full time

    **Job Overview:**We are seeking a highly skilled Postdoctoral Research Associate to join our team at The University of Manchester. As part of a jointly funded project with Scottish Power Energy Network and National Grid, you will be responsible for conducting research on cyber-risk impact awareness scanning tools for the UK future sustainable energy...

  • IT Security and Risk Management Specialist

    1 month ago

    Manchester, United Kingdom Nexperia Full time

    About the RoleNexperia, a fast-growing international high-tech semiconductor company, is seeking an IT Risk & Security Manager to lead the Global Information Security & Compliance team. This team is part of the Global IT department and is responsible for IT security and IT compliance within the entire global organization.Key ResponsibilitiesManage the Global...

  • Cyber-Risk Impact Awareness Scanning Tool Specialist

    1 week ago

    Manchester, United Kingdom The University of Manchester Full time

    The University of Manchester is a world-leading research-intensive university, and as part of its commitment to advancing knowledge and addressing global challenges, we are seeking an exceptional individual to join our team as a Cyber-Risk Impact Awareness Scanning Tool Specialist.This 12-month Postdoctoral Research Associate position, starting from 1st...

  • IT Security and Compliance Manager

    1 month ago

    Manchester, United Kingdom Nexperia Full time

    IT Security and Compliance ManagerNexperia, a leading international high-tech semiconductor company, is seeking an IT Security and Compliance Manager to lead the Global Information Security & Compliance team. The successful candidate will be responsible for managing the team, implementing the cyber security strategy, and ensuring compliance with recognized...

  • Post-Doctoral Research Associate in Cyber-Risk Impact Awareness Scanning Tool

    2 weeks ago

    Manchester, United Kingdom The University of Manchester Full time

    A Postdoctoral Research Associate Position (PDRA) is available from 1st January 2025 for 12 months will conduct research for a fully jointly funded cyber-security for UK future sustainable energy network project by Scottish Power Energy Network (SPEN) and National Grid (NG). The aim of Cyber-RIAST project is to investigate suitable methods solution and...

  • Insurance Risk Analyst

    3 days ago

    Manchester, United Kingdom XL CATLIN Full time

    Insurance Risk Analyst - Cyber and Technology Division\We are seeking an experienced Insurance Risk Analyst to join our Cyber and Technology Division. The ideal candidate will have a Bachelor's degree and some underwriting or underwriting support experience, preferably within the Cyber and Technology insurance space.\This role involves underwriting,...

  • Cyber Security and Compliance Specialist

    1 month ago

    Manchester, United Kingdom Manchester University NHS Foundation Trust Full time

    Diversity MattersMFT is committed to promoting equality of opportunity, celebrating and valuing diversity, and eliminating any form of unlawful discrimination across our workforce, ensuring our people are truly representative of the communities we serve. We strive to create an inclusive environment where all individuals, regardless of age, disability, gender...

  • Cyber Security Specialist

    1 month ago

    Manchester, United Kingdom The Institution Of Engineering And Technology Full time

    Job Title: Cyber Security SpecialistWe are seeking a highly skilled Cyber Security Specialist to join our team in Manchester. As a Cyber Security Specialist, you will be responsible for designing and implementing secure systems and networks to protect our clients' sensitive information.Key Responsibilities:Design and implement secure systems and...

  • Cyber Security Data Governance Lead

    2 weeks ago

    Manchester, United Kingdom Searchability Full time

    Job Title: Cyber Security Data Governance LeadWe are seeking an experienced professional to lead and manage our data protection, governance, and compliance efforts. As a key member of our team, you will be responsible for ensuring the effective implementation and ongoing management of our ISO27001 framework.Key Responsibilities:Implement and maintain our...

  • Head of Cyber Protection

    6 days ago

    Greater Manchester, United Kingdom TalkTalk Telecom Group PLC Full time

    Job OverviewTalkTalk Telecom Group PLC is seeking an experienced Chief Security Officer to join our team. As a recognised Top 50 Inclusive Employer in the UK, we know that diversity means success and innovation.This is a senior leadership role that requires significant experience in information security and risk management. The estimated salary for this...

  • Global Cyber Security and Risk Mitigation Project Manager Lead

    2 weeks ago

    Manchester, United Kingdom NCC Group Full time

    Project Management Opportunity at NCC GroupWe are seeking an experienced Cyber Security and Risk Mitigation Project Manager Lead to join our team. As a key member of our Global Cyber Security and Risk Mitigation Business, you will lead a portfolio of projects from requirements definition through deployment.Key Responsibilities:Determine and define project...

  • Cyber Security Programme Lead

    1 month ago

    Greater Manchester, United Kingdom JD Sports Full time

    About the Role:We are seeking a highly experienced Senior Programme Manager to lead our Cyber & Data Protection Transformation Portfolio. As a key member of our team, you will be responsible for managing the end-to-end delivery of this critical portfolio, ensuring we have a robust cyber security, risk management, and data protection capability.Key...

  • Information Technology Risk Manager

    2 weeks ago

    Manchester, United Kingdom Rothstein Recruitment Full time

    Information Technology Risk Manager - Second Line - Insurance Excellent opportunity to join top rated life insurance firm as a Senior 2LOD Technology Risk Expert in newly created role offering strong working flexibility and meaningful impact to the business. Your main responsibilities: Lead and support the oversight of technology risk and information...