Cyber Security Analyst

Cyber Security Risk Analyst - Edinburgh

£350–£450 per day | Outside IR35

Edinburgh – 1 day per week in office

We’re working with our main public sector client to recruit a Cyber Security Risk Analyst to join their growing cyber and digital function.

This role is much more about people, communication and context than being hands-on technical. It would suit someone who understands cyber and digital risk, can hold confident conversations with both business and technical stakeholders, and can clearly articulate risks, impacts and priorities.

The Role

You’ll work closely across digital, technology and business teams to understand how services operate, where the risks sit, and how those risks are best managed and communicated. You’ll support clear, evidence-based decision making by ensuring risk information is accurate, up to date and meaningful.

You’ll act as a bridge between technical and non-technical teams, helping translate complex issues into practical, business‑focused insight.

Key Responsibilities

• Engage with business and technical stakeholders to identify, assess and understand digital and cyber risks
• Conduct structured risk assessments across projects, changes and live digital services
• Maintain and improve risk management processes and ensure high-quality risk data
• Interpret outputs from assurance activities (e.g. vulnerability scans, audits, pen tests) and feed findings into risk assessments
• Support clear, prioritised recommendations for risk treatment and track mitigation actions
• Contribute to the development of risk reporting and dashboards (e.g. Power BI or similar)
• Stay aligned with current cyber and digital risk standards and good practice

What We’re Looking For

• Experience in cyber / digital risk, assurance or audit roles
• Strong stakeholder engagement and communication skills – confidence working with senior business and technical colleagues
• Ability to understand technical concepts and risks without needing to be deeply hands-on
• Strong judgement around risk, impact and proportionality
• Comfortable working in an agile, collaborative environment
• Proactive, organised and able to see work through end to end

Technical Exposure (not hands-on heavy)

• Microsoft Office (Excel, Word, etc.)
• Cloud platforms (Azure)
• Microsoft 365 (e.g. Forms)
• Power Platform (desirable, not essential)