Salary: £33,000 - 65,000 per year Requirements: Security and Risk Assessment or Audit with Digital / Risk experience In-depth understanding of and experience with enterprise scale digital service provision Ability to work well in an agile environment with internal colleagues and suppliers Ability to self-start and see through improvements and benefits realisation Familiarity with information / security related risk management frameworks and tools (desirable) Experience supporting or maintaining technical risk registers or GRC systems (desirable) Awareness of cloud and enterprise service environments (desirable) Understanding of assurance activities such as audits, vulnerability assessments, and penetration tests (desirable) Formal information or IT risk accreditation beneficial (desirable) Must be eligible for BPSS clearance to commence this contract Responsibilities: Maintain awareness of the current cyber threat landscape, industry standards, and best practices. Support the scoping and assessment of risks related to projects, changes, and digital services. Conduct and support risk assessments and threat modelling to identify and evaluate security risks. Contribute to the development and improvement of risk management processes and ensure risk data is accurately captured and maintained. Interpret outputs from assurance activities (e.g., vulnerability scans, audits, or penetration tests) and incorporate findings into the risk management process. Provide clear, prioritised recommendations for risk treatment and mitigation. Support the design and enhancement of risk data models and tools to enable consistent, efficient risk tracking. Technologies: Cloud Support Security Azure Excel More: We are looking for a contract Cyber Security Risk Analyst to join our cyber security team in Edinburgh (Hybrid role) for a duration of 12 months. In this position, you will work closely with the digital department and business process owners to contribute to the development of new cost-effective and objective risk management processes. Our goal is to support data-driven security decisions and maintain accurate risk information. Joining our team means you will collaborate with various stakeholders including product owners, architects, developers, engineers, and senior security leadership, enhancing our public sector clients capabilities in managing cyber risks. last updated 20 week of 2026