Lead Cyber Security Analyst – Identity and Access Management

• Lead the technical design and implementation of the agency-wide Identity and Access Management strategy
• Oversee access governance, privileged access management, authentication, and user lifecycle processes
• Oversee security administration processes and ensure support requests follow agreed procedures
• Provide guidance on access rights and privileges across applications and services
• Contribute to IAM policies, standards, and guidelines aligned with business, technology, legal, and industry requirements
• Deliver Cyber Security Strategy work related to cyber business risk and information protection
• Champion incident management, investigation, and response policies, processes, procedures, and systems
• Perform security risk and vulnerability assessments and business impact analyses for complex systems and risk-based projects
• Specify environment, data, resource, and tool requirements
• Interpret, execute, and document complex test scripts
• Maintain current knowledge of malware attacks and other cyber security threats
• Provide specialist advice and execute specialised cyber security tasks
• Lead operational delivery and continuous improvement of IAM services protecting Social Security Scotland’s digital services, systems, and sensitive information
• Provide technical leadership and support team capability development across a cloud-first environment

• Subject matter expertise developing and ope rationalising cyber security capabilities
• Experience designing and implementing Identity and Access Management (IAM) controls
• Experience automating identity lifecycle processes
• Experience integrating enterprise applications with identity platforms
• Experience enhancing Privileged Access Management (PAM)
• Experience implementing IAM controls and processes for evolving security, compliance, and business requirements
• Proven experience in incident management and investigation, including reporting, root cause analysis, and resolution
• Ability to provide informed guidance on incident response methodologies and best practice
• Changing and Improving behaviour at Level 4
• Leadership behaviour at Level 4
• Technical skills aligned to Lead Cyber Security Analyst within the Government Digital and Data Profession
• Cyber Security:
  Operations skills
• CV and supporting statement of no more than 750 words
• Successful candidate must clear Security Check national security vetting and Baseline Personnel Security Standard (BPSS)
• Must meet applicable UK Civil Service Nationality Rules
• Standard working hours of 35 hours per week
• Minimum 2 days per week in the assigned Glasgow or Dundee office
• Successful candidate expected to remain in post for a minimum of 3 years unless promoted

Demonstrates expertise in developing and operationalizing Cyber Security capabilities, with a strong focus on Identity and Access Management (IAM) controls and Privileged Access Management (PAM). Proven ability to lead incident management processes and provide technical leadership in a cloud-first environment.

• Identity And Access Management (IAM)
• Privileged Access Management (PAM)
• Incident Management
• Cyber Security Strategy
• Security Check National Security Vetting

• Cyber Security Operations
• Identity Lifecycle Automation
• Access Governance
• Security Risk Assessment
• Vulnerability Assessment
• Test Script Documentation
• Incident Response Methodologies
• Root Cause Analysis
• User Lifecycle Processes
• Access Rights Guidance

• Changing And Improving Behaviour
• Leadership Behaviour

• Baseline Personnel Security Standard (BPSS)

• Cyber Security
• Access Management Strategy
• Compliance Requirements
• Business Impact Analysis
• Cloud-First Environment