Cyber Security Officer

Want to play a key role in protecting a digital platform used by over one million learners across Scotland?

This is an exciting role within Education Scotland where you will be instrumental in helping to drive forward the implementation of an ambitious Information and Cyber Security programme. Working with the Lead Cyber Security Officer, the Technical Delivery Team and Digital Services, amongst others, you will help ensure the confidentiality, integrity and availability of corporate digital systems, including Glow, the national Digital Learning platform for schools which has over one million provisioned users.

You will also help to support the design and implementation of cyber security controls and measures for transformative projects within Education Scotland. This is a high impact role which offers the successful candidate the opportunity of making a strong and significant impact to the benefit hundreds of thousands of learners and teachers across Scotland.

Government Digital and Data (GDD) Pay Supplement

This post attracts a £4,000 GDD pay supplement after a 3 months competency qualifying period. Pay supplements are temporary payments designed to address recruitment and retention issues caused by market pressures and are subject to regular review. This post is part of the Scottish Government GDD profession.

This role is aligned to Cyber Security Risk Manager GDD role. You can find out more about the technical skills required for this role on the UK Government security profession career framework

• Leading the provision of advice and guidance on security strategies to manage identified risks and ensure adoption and adherence to standards.
• Leading penetration testing, security risk assessments and business impact analysis on information systems.
• Interpret information assurance and security policies and applies these in order to manage risks.
• Provide advice and guidance to ensure adoption of and adherence to information assurance architectures, strategies, policies, standards and guidelines.

Threat Identification and Risk Management.

Security Project Design, Procurement and Implementation.

Third Party Oversight- Development, delivery and monitoring compliance of Security Awareness campaigns.

Providing consultancy on projects.

Development of Information Security policies, procedures and guidelines and managing compliance.

Supporting and developing the Information Security Management system- Incident Response.

Leading and mentoring junior members of security staff.

Technical/Professional Skills

• Information risk assessment and risk management
• Applied security capability
• Protective security
• Threat understanding
  
  

You can find out more about the technical skills required for this role on the UK Government security profession career framework

Experience

• Knowledge of Information Security standards such as ISO/IEC 27001, NIST CSF and NCSC CAF with a proven ability to interpret and apply these standards in organisational contexts.
• Understanding of the internal and external information security risks and administrative, physical and technical controls to mitigate against these risks effectively.
• Demonstrable experience in providing information security advice and leadership in the planning, execution, and management of Information Security
  
  

projects, ensuring alignment with organisational goals and industry best practices.

• Knowledge of current legislation, regulations, and standards relevant to information security and privacy, including but not limited to the Data Protection Act 2018 (DPA 2018) and the General Data Protection Regulation (GDPR), with the ability to interpret legal requirements and integrate compliance measures into operational frameworks.
  
  

Behaviours

• Leadership (Level 3)

Changing and Improving (Level 3)

Communicating and Influencing (Level 3)

Developing self and others (Level 3)

You can find out more about Success Profiles Behaviours, here: Success Profiles - Civil Service Behaviours (publishing.service.gov.uk)

How To Apply

Apply online, providing a CV and Supporting Statement (of no more than 1500 words) which provides evidence of how you meet the skills, experience and behaviours listed in the Success Profile above.

Artificial Intelligence (AI) tools can be used to support your application, but all statements and examples provided must be truthful, factually accurate and taken directly from your own experience. Where plagiarism has been identified (presenting the ideas and experiences of others, or generated by artificial intelligence, and presented as your own) applications will be withdrawn and internal candidates may be subject to disciplinary action. 

Please see our candidate guidance for more information on acceptable and unacceptable uses of AI in recruitment.

If invited for further assessment, this will consist of an interview and a technical assessment.

Assessments are scheduled for w/c 15/06/26, however this may be subject to change.

About Us

Education Scotland is the national body for supporting quality and improvement of learning and teaching in Scottish education. It is an Executive Agency of Scottish Government.

We are driven by the shared ambitions of supporting the development and wellbeing of all those who work in education and ensuring positive experiences and outcomes for all learners, from early years to adult learning.

The organisation has many programmes of work to deliver this vision, including responsibility for Digital Learning and Teaching (DLT). We provide a range of digital services – both within the organisation and to the wider education service. This includes Glow, the national online platform for education, customer relationship management services, and public facing web estate. We also provide the main Inspection planning and management platform for His Majesty’s Inspector of Education.

This is a fast moving and exciting area of work which offers lots of opportunity for working across many digital services and technologies.

Security checks

Successful candidates must complete the Baseline Personnel Security Standard (BPSS), before they can be appointed. BPSS is comprised of four main pre-employment checks – Identity, Right to work, Employment History and a Criminal Record check (unspent convictions).

Minimum Time In Post

You will be expected to remain in post for a minimum of three years unless successful at gaining promotion to a higher Band or Grade.  In the event that further posts are required, a reserve list of successful candidates will be kept for up to 12 months.

Location The Job can be based in Glasgow, Dundee or Livingston. The post is flexible and hybrid working in line with current Scottish Government policies.

Apply before 23:59 - 24/05/26 -