Job Description

For over four decades, Cirrus Logic has been propelled by the top engineers in mixed-signal processing. Our rockstar team thrives on solving complex challenges with innovative end-user solutions for the world's top consumer brands. Cirrus Logic is also known for its award-winning culture, built on a foundation of inclusion and fairness, meaningful community engagement, and delivering enjoyable employee experiences at every turn. But we couldn’t do it without our extraordinary workforce – and that’s where you come in. Join our team and help us continue to make Cirrus Logic an exceptional place to grow your career!

We are seeking a highly motivated, experienced professional to join the Cirrus Logic Information Security team as a Lead Information Security Analyst - Governance, Risk Management, & Compliance (GRC).

You will be responsible for designing, operating, and continually improving our ISO 27001–aligned governance, risk, and compliance program, with a strong focus on Integrated Risk Management, Third Party Risk Management, and security control effectiveness. You will also help define, refine, and operationalise the responsible use of AI technologies and services (including GenAI and Agentic AI) across the enterprise from a security and risk perspective. This role is highly collaborative and supports business strategy in a dynamic, engineering driven environment.

Key Responsibilities

Required Skills and Qualifications

• Proven experience in Information Security with a strong focus on GRC, risk management, and/or security compliance in a global environment.
• Bachelor’s degree in cybersecurity, information systems, or a related field, or demonstrated equivalent experience as a security professional in a globally dispersed enterprise.
• Hands‑on experience with ISO/IEC 27001 (ISMS lifecycle, Annex A controls, risk assessment and treatment) and related security control frameworks (e.g., NIST CSF, ISO 27000, TISAX, etc.).
• Demonstrated experience with Integration Risk Management (project/solution risk assessments) and Third‑Party Risk Management (vendor due diligence, ongoing monitoring, and remediation).
• Technical fluency across core IT and security domains (e.g., network, endpoint, identity, cloud/SaaS, logging/monitoring) and experience working with Security Engineering, Security Operations, and IT teams.
• Experience configuring and maintaining an enterprise-grade GRC platform, preferably ServiceNow GRC, for risk, control, assessment, and exception workflows.
• Strong analytical and problem‑solving skills, with the ability to balance security, compliance, and business objectives in a practical way.
• Effective communication and interpersonal skills, with the ability to clearly convey risk and technical issues to both technical and non‑technical stakeholders, including senior leaders.
• Proven ability to drive work independently, manage multiple concurrent initiatives, and follow through to completion in a fast‑paced environment.
• Experience working in high‑tech, engineering, or semiconductor environments is beneficial.
• Relevant certifications (e.g., ISO 27001 Lead Implementer/Lead Auditor, CISSP, CISM, CISA, CRISC) are preferred but not required.

This position is based in our Edinburgh office. It is a hybrid role (minimum 2+ days onsite) with the flexibility to work from home, depending on business needs. Candidates must live within a commutable distance or be willing to relocate.

#LI-HD1

#LI-Hybrid

Export control restrictions based upon applicable laws and regulations would prohibit candidates who are nationals of certain embargoed countries from working in this position without Cirrus Logic first obtaining an export license. Candidates for this role must be able to access technical data without a requirement for an export license. We are unable to sponsor or obtain export licenses for this role.

At Cirrus Logic, we believe that diversity drives innovation, and we are committed to encouraging an open and collaborative culture where different approaches, ideas, and points of view are respected and valued. We aim to promote a workplace where everyone can contribute irrespective of race, colour, national origin, religion or belief, gender or gender identity, sexual orientation, age, marital status, pregnancy status, or disability.