Cyber Security Risk Manager

Cyber Security Risk Manager

Edinburgh | £70,000 | Permanent

Published: 09.10.25 Ref: BBBH52124_1760046240

Cyber Security Risk Manager required to join a globally recognised SaaS company in Edinburgh, leading the governance, risk, and compliance (GRC) function and helping shape cyber security strategy in a cutting edge environment.

The Company

This is a modern, globally recognised SaaS company operating at the forefront of data analytics. Their datasets are relied upon by clients to make very high stakes decisions, making security critical both for the business and the clients it serves. With a strong focus on innovation, they deliver high value insights that enable fast, confident decision making in complex markets.

Security is integral to the company's operations, safeguarding platforms, data, and users against evolving cyber threats. The business is currently enhancing its risk management program, providing a unique opportunity to shape processes, influence strategy, and drive tangible results. You'll join a collaborative and transparent team that values open communication, shared success, and measurable impact.

The Role

As Cyber Risk Manager, you will lead the maturity and execution of the governance, risk, and compliance (GRC) function. You will ensure the business has clear visibility of its cyber risk exposure and the processes in place to respond effectively.

You will oversee the enterprise risk register, manage the risk exception process, and drive SOC 2 readiness initiatives. Partnering with IT, architecture, SRE, and procurement teams, you'll translate complex technical risks into actionable business decisions and provide senior leaders with clear, data driven insights. You will also align the company with leading industry frameworks such as NIST CSF, NIST 800 53, and SOC 2, helping advance its risk maturity.

What You'll Be Doing

** Lead and continuously improve the cyber risk management program, including oversight of the enterprise risk register.

** Manage risk exceptions and ensure timely review, tracking, and remediation of risks.

** Drive SOC 2 readiness activities and collaborate with auditors and internal stakeholders to ensure compliance.

** Develop and enforce cybersecurity governance policies, standards, and procedures aligned with industry frameworks.

** Work with IT, SRE, Architecture, and Procurement teams to identify, assess, and mitigate technology and third party risks.

** Provide clear, actionable reporting and metrics to senior leadership, translating technical risks into business impact.

** Act as a trusted advisor to business leaders, balancing security requirements with operational objectives.

What We're Looking For

We're seeking a proactive cyber professional with proven experience in risk management ideally within a SaaS or technology environment. You'll be confident managing enterprise risk registers, internal audits, and exception processes, with a strong ability to influence stakeholders across IT and the business.

You'll bring:

** 5+ years in cybersecurity risk management, GRC, or equivalent senior role.

** Hands on experience with NIST CSF, NIST 800 53, SOC 2, and risk frameworks.

** Experience in SOC 2 audit readiness and execution.

** Knowledge of enterprise GRC tools such as ServiceNow, Archer, or Purview Compliance Manager.

** Strong analytical skills with the ability to turn data into actionable insights.

** Excellent communication skills, able to engage technical teams and senior business leaders.

** A collaborative, transparent, and solutions focused mindset.

The Offer

You'll receive a competitive salary of up to £70,000, plus bonus opportunity and a comprehensive benefits package including private healthcare, enhanced pension, generous leave, and wellness support.

The role offers flexible hybrid working, with just two days per week onsite in a modern, Edinburgh city centre office.

If this sounds of interest, please apply or reach out to Murray Simpson.

Tips

We can help you prepare interviews and offer some great tips to help candidates get the best possible start.

Process

Before we assess a candidate and put them forward, we’ll do a phone interview to get a better understanding of the type you’re looking for, your goals and plans.

Preparation

We know exacly what employers are looking, especially our clients, because they told us. We can help you prepare for the interview and shape up for meeting their team.

Branding

Personal branding is a term you may or may not be familiar with. In our connected world, it pays to be fully prepared for what happens when employees search your name.

Our clients

Candidates

Compared to other recruiters I have worked with she seemed genuinely interested in helping me with my job search rather than just fulfilling quotas.

Software Developer – Lincoln

I can say with total sincerity I’ve never dealt with a more professional, knowledgeable and personable recruitment firm in fifteen years of contracting. They helped my wife and I relocate to Edinburgh with our five month old son and it’s in no small part to their tips and recommendations that we’ve settled in so quickly.

Transformation Consultant – Leeds

Equal parts friendly and professional, never once coming across as simply going through the motions and made the whole thing as painless as possible for all parties

Software Developer – Glasgow

Absolutely fantastic throughout my interview process, and I cannot recommend him highly enough! First of all, he is an absolutely brilliant communicator and extremely reliable. On top of all of his brilliant recruitment skills, it was amazing to see how genuinely excited he was for me when I received my offer. This truly conveyed to me how much he cares about his clients.

Software Engineer – Edinburgh

It was a breath of fresh air – She is professional and approachable and will be there to help you every step of the way. Other recruiters give you the hard sell and the ‘best friend routine’ to get you on board and then just leave you guessing, but not here… She’s the real deal

Solutions Architect – Glasgow

He goes out of his way to ensure you are prepared for your interview and I particularly appreciated his professional no nonsense approach to working with me to find a new position.

Infrastructure Architect – Glasgow

THE BEST test recruiter I’ve had the pleasure of working with, from start to finish. She provided me with training resources and is an organiser and participant in testing events. She really has taken the time to fully understand the testing principles.

Test Analyst – Aberdeen

She was friendly, communicative and informative, talked me through the process and gave me good advice at every stage.

Software Engineer – Manchester

I have had dealings with the majority of recruitment agencies in this country and beyond. He really stands out from the crowd and the IT industry would benefit from more people like him.

Software Developer – Glasgow

A friend looking after me, that’s how I felt. His friendly character made the whole process way easier and enjoyable, he also managed to get me one of the most interesting work opportunities. I’m really glad our paths have crossed.

Software Engineer - Edinburgh

He is the most honest, thorough and experienced recruitment consultant I have ever dealt with. If he can’t help you, he’ll tell you rather than spinning a yarn and putting you forward for jobs that aren’t suitable.

Technical Author – Edinburgh

Never have a I met a recruiter like him, who embeds himself in the community so thoroughly in a way that could only be genuine. From our conversations, he has shown an understanding of the industry I would expect from a local CTO.

MI Analyst – Bolton

He stood out in a world of poorly informed, unreliable and frankly annoying recruiters as a breath of fresh air.

Data Scientist – Manchester

I’ve never written a recommendation for a recruiter before, so it must show how impressed I am!

Software Developer – Northampton

She even was able to help get a firmer offer as I was offered two roles on the same day. I felt she went over and above to get the best offer she could for me without selling myself short.

QA Engineer – Glasgow