Lead Cyber Security Analyst - Identity and Access Management

Lead the technical design and implementation of the agency-wide Identity and Access Management strategyOversee access governance, privileged access management, authentication, and user lifecycle processesOversee security administration processes and ensure support requests follow agreed proceduresProvide guidance on access rights and privileges across applications and servicesContribute to IAM policies, standards, and guidelines aligned with business, technology, legal, and industry requirementsDeliver Cyber Security Strategy work related to cyber business risk and information protectionChampion incident management, investigation, and response policies, processes, procedures, and systemsPerform security risk and vulnerability assessments and business impact analyses for complex systems and risk-based projectsSpecify environment, data, resource, and tool requirementsInterpret, execute, and document complex test scriptsMaintain current knowledge of malware attacks and other cyber security, practiceChanging and Improving behaviour at Level 4Leadership behaviour at Level 4Technical skills aligned to Lead Cyber Security Analyst within the Government Digital and Data ProfessionCyber Security: Operations skillsCV and supporting statement of no more than 750 wordsSuccessful candidate must clear Security Check national security vetting and Baseline Personnel Security Standard (BPSS)Must meet applicable UK Civil Service Nationality RulesStandard working hours of 35 hours per weekMinimum 2 days per week in the assigned Glasgow or Dundee officeSuccessful candidate expected to remain in post for a minimum of 3 years unless promotedCore CompetenciesDemonstrates expertise in developing and operationalizing Cyber Security capabilities, with a strong focus on Identity and Access Management (IAM) controls and Privileged Access Management (PAM). Proven ability to lead incident management processes and provide technical leadership in a cloud-first environment.Highest-signal resume keywordsIdentity And Access Management (IAM)Privileged Access Management (PAM)Incident ManagementCyber Security StrategySecurity Check National Security VettingATS Optimization KeywordsHard SkillsCyber Security OperationsIdentity Lifecycle AutomationAccess GovernanceSecurity Risk AssessmentVulnerability AssessmentTest Script DocumentationIncident Response MethodologiesRoot Cause AnalysisUser Lifecycle ProcessesAccess Rights GuidanceSoft SkillsChanging And Improving BehaviourLeadership BehaviourCertifications & QualificationsBaseline Personnel Security Standard (BPSS)Industry KeywordsCyber SecurityAccess Management StrategyCompliance RequirementsBusiness Impact AnalysisCloud-First Environment #J-18808-Ljbffr

threatsProvide specialist advice and execute specialised cyber security tasksLead operational delivery and continuous improvement of IAM services protecting Social Security Scotland’s digital services, systems, and sensitive informationProvide technical leadership and support team capability development across a cloud-first environmentRequirementsSubject matter expertise developing and operationalising cyber security capabilitiesExperience designing and implementing Identity and Access Management (IAM) controlsExperience automating identity lifecycle processesExperience integrating enterprise applications with identity platformsExperience enhancing Privileged Access Management (PAM)Experience implementing IAM controls and processes for evolving security, compliance, and business requirementsProven experience in incident management and investigation, including reporting, root cause analysis, and resolutionAbility to provide informed guidance on incident response methodologies and best