Cyber Security Analyst

Are you ready to use your problem-solving skills to help protect critical systems and services in a fast-moving cyber security environment?

The Cyber Security team, part of the Digital team at Accountant in Bankruptcy (AiB), is at the forefront of defending against cyber threats and plays a vital role in protecting the organisation’s information assets. We ensure the secure delivery of services across government and partner agencies by safeguarding the confidentiality, integrity, and availability of systems and data through proactive risk management, monitoring, and incident response.

As a Cyber Security Analyst, you will be at the heart of this mission. We are looking for someone who is passionate about cyber security and eager to help us stay ahead of evolving threats. In this role, you will apply your technical expertise to implement and maintain security controls, support operational procedures, and respond effectively to security incidents - making a real impact on the resilience of our services.

You will work with business and technical teams to manage risks, perform vulnerability assessments, and ensure compliance. Key tasks include managing access rights, supporting network maintenance, and handling system backups. You will also investigate security breaches, carry out forensic analysis when needed, and recommend actions to strengthen our security posture.

• Assist users in defining their access rights and privileges. Perform standard security administration tasks and resolve security administration issues.
• Communicate information security risks and issues to business managers and other stakeholders.
• Investigate security breaches using forensic techniques where appropriate, in accordance with established procedures; recommend required actions and support/follow-up to ensure these are implemented.
• Perform security risk assessments, vulnerability assessments, and business impact analyses for small information systems.
• Identify operational problems and contribute to their resolution.
• Create test cases using in-depth technical analysis of risks and common vulnerabilities.
• Apply and maintain specific security controls in line with organisational policy and local risk assessments.

Success profiles are specific to each job and they include the mix of skills, experience and behaviours candidates will be assessed on.

This role is aligned to Cyber Security Analyst within the Digital, Data and Technology Profession. These skills will be tested during the Technical Assessment if you are successful at sift stage. They will be not be assessed at application stage. Please review the following to understand the skill expectations:
Cyber security: operations - gov.scot

• Experience of applying the principles of secure configuration and routine security procedures such as patching, managing access rights, malware, protection or vulnerability testing under supervision.
• Experience of defining incident management, incident investigation and response policy and/or incident management and investigation processes, procedures and systems and can advise others on incident management, incident investigation and response processes.
• General knowledge of system architectures in order to articulate the impact of vulnerabilities on existing and future designs and systems.

• Seeing the big picture - Level 2.
• Changing and improving - Level 2.
• Making effective decisions - Level 2.

You can find out more about Success Profiles here:
Success profiles: candidate guide - gov.scot

Apply online, providing a CV and Supporting Statement (of no more than 750 words
) which provides evidence of how you meet three experiences listed in the Success Profile above.

Artificial Intelligence (AI) tools can be used to support your application, but all statements and examples provided must be truthful, factually accurate and taken directly from your own experience. Where plagiarism has been identified (presenting the ideas and experiences of others, or generated by artificial intelligence, and presented as your own) applications will be withdrawn and internal candidates…