Full-Time

Lead Information Security Analyst

GRC

Cirrus Logic

Cirrus Logic

1,001-5,000 employees

Low power audio and mixed-signal ICs

No salary listed

Edinburgh, UK

Hybrid

Hybrid role requiring minimum 2+ days onsite; candidates must live within commutable distance or be willing to relocate.

Bachelor's

Category
Cybersecurity (1)
Required Skills
ServiceNow
Risk Management

Get referred to Cirrus Logic

See people who can refer or advise you

Requirements
  • Proven experience in Information Security with a strong focus on GRC, risk management, and/or security compliance in a global environment.
  • Bachelor’s degree in cybersecurity, information systems, or a related field, or demonstrated equivalent experience as a security professional in a globally dispersed enterprise.
  • Hands‑on experience with ISO/IEC 27001 (ISMS lifecycle, Annex A controls, risk assessment and treatment) and related security control frameworks (e.g., NIST CSF, ISO 27000, TISAX, etc.).
  • Demonstrated experience with Integration Risk Management (project/solution risk assessments) and Third‑Party Risk Management (vendor due diligence, ongoing monitoring, and remediation).
  • Technical fluency across core IT and security domains (e.g., network, endpoint, identity, cloud/SaaS, logging/monitoring) and experience working with Security Engineering, Security Operations, and IT teams.
  • Experience configuring and maintaining an enterprise-grade GRC platform, preferably ServiceNow GRC, for risk, control, assessment, and exception workflows.
  • Strong analytical and problem‑solving skills, with the ability to balance security, compliance, and business objectives in a practical way.
  • Effective communication and interpersonal skills, with the ability to clearly convey risk and technical issues to both technical and non‑technical stakeholders, including senior leaders.
  • Proven ability to drive work independently, manage multiple concurrent initiatives, and follow through to completion in a fast‑paced environment.
  • Export control restrictions based upon applicable laws and regulations would prohibit candidates who are nationals of certain embargoed countries from working in this position without Cirrus Logic first obtaining an export license.
Responsibilities
  • GRC Program & ISO 27001: Lead day‑to‑day operation and continuous improvement of our ISO 27001–aligned Information Security Management System (ISMS), including policies, standards, and control procedures across the organization.
  • Policy, Standards, and Exception Management: Develop, maintain, and socialise information security policies, standards, and guidelines; manage exceptions, ensuring decisions are risk‑based, documented, and periodically reviewed.
  • Integrated Risk Management: Lead security risk and control assessments for new systems, services, and business initiatives, partnering with Security, IT, and business owners to identify threats, evaluate the design and operating effectiveness of controls, and document and track risk treatment plans. This includes evaluating AI/ML use cases (internal builds and third-party services) for security, data protection, and misuse risks.
  • Third‑Party Risk Management: Plan and execute third‑party risk assessments for suppliers and service providers, including review of third-party security questionnaires, trust documents, and remediation plans to ensure third-party security meets Cirrus Logic’s requirements.
  • Risk Analysis & Reporting: Analyze risks across technologies and business processes, prioritize remediation efforts based on business impact and likelihood, and prepare clear risk and control status reports for security leadership and key stakeholders.
  • GRC Tooling & Automation: Configure, administer, and optimize GRC tooling, such as ServiceNow GRC or OneTrust GRC, to support risk registers, control libraries, assessments, exceptions, and third-party workflows, including integration with IT and security platforms where appropriate.
  • Audit & Assessment Support: Coordinate and provide evidence for internal and external audits, customer security assessments, and certifications (e.g., ISO 27001, SOC‑related reviews), ensuring consistent, high‑quality responses.
  • Privacy & Regulatory Support: Partner with Legal, HR, and other stakeholders to identify and manage security‑related privacy and regulatory obligations; support privacy risk assessments and data protection controls as needed. Work with these stakeholders to assess privacy and data protection implications of AI/ML solutions, including data ingestion, training, and model outputs.
  • AI Risk & Governance: Define and maintain security and risk guardrails for the use of AI/ML technologies, including acceptable-use guidelines, control requirements, and review processes for new AI use cases and vendors.
  • Collaboration & Enablement: Act as a trusted advisor to the team members, IT, and business teams, helping translate security and risk requirements into practical, implementable solutions that align with engineering and operational realities. Partner closely with IT, engineering, and business teams to embed security, risk, and governance requirements into AI solution design and operations. Work effectively with a globally dispersed team across various time zones that Cirrus operates in.
  • Communication, Executive Presence & Awareness: Strong executive presence with outstanding written, verbal, and presentation skills. Ability to communicate complex risk, control, compliance, and program matters clearly and credibly to technical teams, business stakeholders, and executive leadership. Proven capability to develop high-quality executive-ready content, including presentations, briefings, and status updates that drive informed decision-making. Support and contribute to GRC awareness, communications, and training initiatives, including targeted awareness on the secure and responsible use of authorised AI tools.
Desired Qualifications
  • Experience working in high-tech, engineering, or semiconductor environments is beneficial.
  • Relevant certifications (ISO 27001 Lead Implementer/Lead Auditor, CISSP, CISM, CISA, CRISC) are preferred but not required.

Cirrus Logic designs low-power, high-precision mixed-signal ICs and software for audio and control, primarily for mobile audio, smart home, and wearables. Its products include mobile audio devices, smart home speakers, wearables, and headsets that are integrated into end devices by manufacturers. The company focuses on power-efficient signal processing and collaborates with top device makers, offering ICs, software, services, and development tools. Its goal is to be a leading supplier of audio and mixed-signal solutions that improve user experiences in mobile, smart home, and wearable devices while upholding strong governance and ESG practices.

Company Size

1,001-5,000

Company Stage

IPO

Headquarters

Austin, Texas

Founded

1984

Get referred to Cirrus Logic

See people who can refer or advise you

Simplify Jobs

Simplify's Take

What believers are saying

  • Q1 FY27 revenue hit $459.7 million, up 13% year over year.
  • Scottish Enterprise funded metrology AFE development through 2028, expanding energy-market exposure.
  • GlobalFoundries capacity reservation through 2028 secures wafer supply and pricing stability.

What critics are saying

  • One customer supplied about 90% of Q1 FY27 revenue, creating existential concentration risk.
  • PC growth slipped after platform shortages, memory constraints, and delayed OEM launches in 2026.
  • pSemi sued over LN8411 patents in 2025, showing IP battles can hit product lines.

What makes Cirrus Logic unique

  • Cirrus Logic owns smartphone audio sockets with custom amplifiers and smart codecs at Apple.
  • Its mixed-signal portfolio spans audio, camera, battery, power, and smart-meter metrology.
  • Scottish engineering and 1,000 patents reinforce chip-design depth and product integration.

Help us improve and share your feedback! Did you find this helpful?

Benefits

Health Insurance

401(k)

Paid Time Off

Monthly Concerts

Weekly Happy Hours

Festival Tickets

On-Site Med Clinic

Community Events

Growth & Insights and Company News

Headcount

6 month growth

3%

1 year growth

3%

2 year growth

3%
Yahoo Finance
Sep 10th, 2026
Cirrus Logic posts record $459.7M revenue but cuts PC outlook on platform delays

Cirrus Logic reported record first-quarter revenue of $459.7 million, up 13% year over year, with non-GAAP earnings per share of $1.84. High-performance mixed-signal revenue climbed 26% to $210.7 million, driven by expanded smartphone content across camera, battery and power applications. However, the company cut its fiscal 2027 PC segment outlook. CEO John Forsyth cited constrained platform supply, memory shortages and pricing pressure, which prompted OEMs to delay new model launches. Those delayed models typically carry higher Cirrus Logic content and volume. The company holds $1.2 billion in cash with no debt and generated $598.6 million in operating cash flow over 12 months. Cirrus Logic repurchased $34.5 million in shares during the quarter and another $50.5 million afterward.

Yahoo Finance
Sep 1st, 2026
Cirrus Logic EVP sells 1,166 shares for $137K under Rule 10b5-1 plan

Jeffrey W. Baumgartner, EVP of R&D at Cirrus Logic, sold 1,166 shares of common stock on 20 August 2026 for approximately $137,460. The sale was executed under a Rule 10b5-1 trading plan established on 27 February 2026. Following the transaction, Baumgartner retains direct ownership of 14,073 shares, valued at $1.65 million. This represents a 0.0279% ownership stake in the semiconductor firm. Cirrus Logic designs energy-efficient mixed-signal semiconductor solutions for the portable electronics market. The company reported trailing twelve-month revenue of $2.0 billion and net income of $431 million, with a market capitalisation of $5.9 billion. Shares were priced at $117.89 during the transaction. The stock delivered a 3.6% total return over the year ending 20 August 2026.

Scottish Council for Voluntary Organisations
Aug 25th, 2026
Coding and AI hubs launch across Scotland.

Coding and AI hubs launch across Scotland. 25 August 2026 Widen access to coding and AI learning A national network of community coding and AI hubs is to be created across Scotland as part of a new strategy by Digital Xtra to widen access to extracurricular computing activities for young people. The charity, which is backed by the Scottish Government and industry, said the move marks a shift from funding individual projects towards a place-based model designed to support grassroots computing clubs in local communities. The first phase of the Code Xtra strategy will see hubs established in North Edinburgh, Midlothian, Inverclyde and Moray, with further locations expected to be confirmed later this year. Digital Xtra has supported 210 grassroots activities over the past decade, awarding more than £1.1m through its annual grants programme and engaging more than 60,000 young people across Scotland. Under the new model, the charity will work with selected delivery partners to develop hubs that can host sessions, train local educators and community leaders, and lend equipment and resources to schools and community groups. The initial hubs will be based at Muirhouse Library in North Edinburgh, Dalkeith Library in Midlothian, Creative Regeneration in Inverclyde, and Elgin Library in Moray. Digital Xtra said the hubs will support the creation and growth of grassroots computing clubs while expanding access to coding, machine learning and AI learning opportunities outside the classroom. The hubs will feature LEGO Education's curriculum-aligned Computing Science & AI kits, which teach age-appropriate lessons on foundational coding and machine learning. The charity said it is one of the first organisations in Scotland to make the kit available to the public, while the new strategy also brings machine learning and AI skills into its remit for the first time. Training and support will be provided by Digital Xtra, Raising Robots and the Raspberry Pi Foundation, alongside the charity's education and industry partners. Digital Xtra will continue working with the Scottish Government and industry partners including Skyscanner, Baillie Gifford and Cirrus Logic to extend the hub network. It is also seeking support from other companies and organisations interested in backing additional coding and AI hubs across Scotland. The hubs will focus on three areas: delivering extracurricular coding and AI sessions for children and young people; providing training and guidance for local educators and community leaders; and acting as lending libraries for equipment and learning resources. Kraig Brown, Digital Xtra's Partnerships and Development Manager, said: "Technology is evolving faster than ever, and extracurricular tech activities are no longer just 'nice-to-have' - they are now a key part of young people's learning journey. When assessment and accreditation aren't the primary focus, young people have the freedom to think creatively, naturally building their 'STEM Capital.' "They are also a proven way to reach young people who often disengage in a traditional classroom setting and can be delivered in various locations or times that work for young people, their families, and the wider community. "However, access to grassroots computing initiatives in Scotland is often a postcode lottery with varying coverage and support. This is unacceptable. Digital Xtra will continue to champion extracurricular computing initiatives for young people through its new community coding & AI hubs network, which will create a more joined-up approach to informal digital learning. "By working with the hubs to develop this new ecosystem, Digital Xtra will continue to be at the forefront of driving digital skills for young people, regardless of their background or postcode." Minister for Business Tom Arthur said: "Digital skills are essential for Scotland's future, and every young person should have the opportunity to develop them, regardless of where they live, which is why I am proud to support this initiative. "These new community coding and AI hubs will help more young people access high-quality learning opportunities, build confidence with technology and gain the skills needed to thrive in an increasingly digital world."

Yahoo Finance
Aug 18th, 2026
Cirrus Logic shares up 51% but still trading 24% below DCF intrinsic value of $158

Cirrus Logic shares have gained 51.5% over three years, yet the stock appears undervalued according to multiple metrics. A Discounted Cash Flow analysis estimates intrinsic value at around $158 per share, suggesting the stock trades at roughly a 24.1% discount. The company recently recorded quarterly revenue of $460 million, driven by demand for custom smartphone components. This revenue supports expectations for future cash generation, though any slowdown in key end markets could affect investor sentiment. Cirrus Logic produced approximately $568.6 million in free cash flow over the latest twelve months. The company scores highly on valuation checks, receiving 5 out of 6 on Simply Wall St's assessment, indicating it screens as cheap rather than expensive across most measures.

Yahoo Finance
Aug 17th, 2026
Cirrus Logic trades near 5-year valuation low as Q1 EPS beats but full-year estimate drops 5%

Cirrus Logic trades at 13.36 times forward earnings, near the low end of its five-year range, as earnings expectations weaken. The semiconductor company reported strong first-quarter results, with adjusted earnings of $1.84 per share, up 21.9% year-over-year and beating estimates. However, the consensus estimate for current fiscal year earnings stands at $7.47 per share, down from $9.26 in fiscal 2026. The estimate has declined roughly 5% over the past month. Cirrus faces significant concentration risk, with its largest customer accounting for approximately 90% of first-quarter revenues. This exposure leaves the company vulnerable to changes in product timing and sourcing decisions. The company maintains a strong balance sheet with $1.2 billion in cash and no debt. Free cash flow totalled $48.6 million, supporting increased research and development investment across its product portfolio.