Security Risk Manager
1 month ago
Security Risk Manager (R0253471)
Location – Crawley/Reading/Cheadle/Glasgow/Doncaster/Templecombe (Hybrid)
Are you looking to build your career as a security risk professional? Do you want the opportunity to work within a highly regarded team that will support with your learning and development? Then look no further…
The Role
We have a unique opportunity for a Security Risk Manager. It’s a key role to support Thales UK identify, assess, promote, liaise and manage security risks. Maintain and manage risk profiles against security compliance requirements and provide regular reporting to relevant stakeholders.
The successful candidate is responsible for supporting the ongoing management of security risks by promoting relevant policies, processes, guidance to continuously develop and maintain the required level of maturity across the organisation
This role is full time and can be worked on a hybrid basis but will be based primarily on site at one of Thales main offices (Crawley, Reading, Cheadle, Templecombe, Glasgow or Doncaster).
Key Duties & Responsibilities
Support the GRC Manager and the wider Corporate Security Office deliver on the relevant strategy & roadmap for Thales UK Analyse technical, physical, environmental and personnel security risks, advise/support relevant stakeholders around risk assessments and controls Develop, produce and report on risk metrics to demonstrate correlations and highlight concerns to management/stakeholders Support business lines and functions assess their risks and advise them on mitigation strategies such as avoid, reduce, transfer or accept Promote the security risk management policy and process to help improve security culture across the organisation Translate technical jargon into business-focused risk statements, helping the business understand their risks and present risks to senior management Support with maintaining the ISMS through promoting the established risk process, relevant controls and taking part in the relevant internal and external assessments Monitor and evaluate the effectiveness of security controls to manage risk to acceptable levels and produce metrics Support the business in achieving and/or maintaining security accreditations as relevant such as ISO 27001, CE+, IPSA, etc. Deliver training and awareness as necessary on risk management process across the organisation Work as part of the GRC team and wider CSO to ensure compliance to industry recognised security certifications/accreditations (such as ISO27001, CE+, CMMC, NIST, FSC, IPSA, etc.) Provide subject matter expert input in maintenance of relevant process documentation as required in addition to owning the security risk management process to include co-ordinate, review, update, and communicate as necessary to ensure compliancy and relevance to the business and contractual requirements Maintain the GRC: Integrated Risk Management platform in accordance to risk policy and process Effective stakeholder engagement to include and not limited to the BL SIROs, IAOs, PSOs, CSO, Site Directors, BL MDs, Board members and other functions/teams as relevant Report and improve metrics/dashboards and create monthly Key Risk Indicators (KRIs), Key performance indicators (KPIs) for the CSO, senior management and other relevant stakeholders as required Support the business identify new security risks against the context of the organisation such as changes in legal & regulatory requirements, new customers/sector through bids & projects Work closely with other interdependent process such as Threat Intelligence, Incident Management, Site security management, audits, supply chain management, business management network process and BCP/DR process Perform educational workshops on Security Risk management as required Contribute to security training and awareness campaigns and e-modules Create, review and update relevant documentation related to security risk management but not limited to such as policy, process, ToRs, training, etc.Skills and Experience
Demonstrable experience in a mid to senior level strategic security risk management role. Proven experience in monitoring compliance with security accreditations/ standards such as ISO 31000, ISO 27005 and ISO 27001 (or similar security standards) Good communication and engagement skills are vital for this role, to be able to articulate ideas, risks and problems in a clear and concise way Good analytical skills – being able to take a lot of information, see how to process it and get useful metrics and reporting Excellent written skills, able to provide clearly written reports Proven ability in problem solving and analytical thinking, being able to provide solutions to complex problems Qualifications such as CRISC, CSRM, etc. beneficial but not essentialThales Benefits
Annual performance bonus 8% Pension contributions up to 7% Stock option opportunities Generous training budget and allowance to attend conferences/workshops. 28 days base holiday (27 days + 1 company holiday in conjunction with Xmas bank holidays) Permanent Health Insurance, Critical Illness insurance (optional) Private Medical Insurance, Employee Assistance Programme, Healthcare Cash Plan Extensive private healthcare plans, gym and well-being memberships, Cycle to Work, Travel Insurance, Holiday Purchase Enhanced maternity and parental leave. Life insurance; x times of base annual salary Discounts on major retail outlets Hybrid work Flexible hours (37 hrs a week) + Friday half day#LI-SB1
#LI-Hybrid
In line with Thales' Baseline Security requirements, candidates will be asked to provide evidence of identity, eligibility to work in the UK and employment and/or education history for up to three years. Some vacancies may require full Security Clearance which can require further evidence to be provided. For further details of the evidence required to apply for Baseline and Security Clearance please refer to the Defence Business Services National Security Vetting (DBS NSV) Agency.
At Thales we provide CAREERS and not only jobs. With Thales employing 80,000 employees in 68 countries our mobility policy enables thousands of employees each year to develop their careers at home and abroad, in their existing areas of expertise or by branching out into new fields. Together we believe that embracing flexibility is a smarter way of working.
Thales UK is committed to providing an inclusive and barrier-free recruitment process. We will provide reasonable adjustments and support to ensure neuro-diverse applicants or those with a disability or long-term condition can be their best during the recruitment process. To request an adjustment,if you need this job advert in an alternative format or if you have any questions about the recruitment process, please contact Resourcing Ops for mid to senior roles, or the Early Careers Team for graduate and apprentice roles.
Great journeys start here, apply now
-
Risk Manager
5 months ago
Saint Louis, United States General Search & Recruitment Full timeJob DescriptionJob DescriptionRisk ManagerSt. Louis, MO.Unlock Your Potential as a Risk Manager Extraordinaire!Are you ready to take the helm and chart a course towards safeguarding our company from the winds of uncertainty? Our client is seeking a visionary Risk Manager to join our dynamic team and lead the charge in fortifying the organization against...
-
TRANSCOM IGC
3 weeks ago
Saint Louis, United States IT Partners,Inc Full timeJob DescriptionJob DescriptionThe candidate will be responsible for security risk management for an application that supports logistics and transportation management. The candidate will be a cyber professional with the ability to advise, implement and manage documentation and analysis of databases, applications and infrastructure. The RMF Leader will be...
-
TRANSCOM IGC
2 months ago
Saint Louis, United States IT Partners,Inc Full timeJob DescriptionJob DescriptionThe candidate will be responsible for security risk management for an application that supports logistics and transportation management. The candidate will be a cyber professional with the ability to advise, implement and manage documentation and analysis of databases, applications and infrastructure. The RMF Leader will be...
-
TRANSCOM IGC
3 months ago
Saint Louis, United States IT Partners,Inc Full timeJob DescriptionJob DescriptionThe candidate will be responsible for security risk management for an application that supports logistics and transportation management. The candidate will be a cyber professional with the ability to advise, implement and manage documentation and analysis of databases, applications and infrastructure. The RMF Leader will be...
-
Information Security Risk Analyst
6 days ago
Saint Johnsbury, Vermont, United States Point72 Careers Full timeInformation Security Risk AnalystA Career with Point72's Technology TeamAs Point72 innovates the future of investment strategies, our Technology division is continually enhancing our IT framework, placing us at the forefront of a swiftly changing technological environment. We are a collective of specialists exploring and discovering new methods to leverage...
-
Saint-Brieuc, Bretagne, United States The One 23 Group Full timeJob OverviewThe One 23 Group is dedicated to establishing a standard of excellence in government services. Our focus is on empowering clients within the Department of Defense, Intelligence Community, and Federal Civilian sectors through our advanced capabilities. We prioritize a people-centric culture, grounded in strong ethical values, and are committed to...
-
Saint-Brieuc, Bretagne, United States The One 23 Group Full timeJob OverviewThe One 23 Group is dedicated to establishing the highest standards in government services. Our commitment is to empower clients within the Department of Defense, Intelligence Community, and Federal Civilian sectors through our advanced capabilities. We prioritize a people-first culture, driven by unwavering ethical standards, and embrace...
-
Saint-Brieuc, Bretagne, United States The One 23 Group Full timeJob OverviewThe One 23 Group is dedicated to establishing a standard of excellence in government services. Our focus is on empowering clients within the Department of Defense, Intelligence Community, and Federal Civilian sectors through our advanced capabilities. We prioritize a people-centric culture, grounded in strong ethical values, and are committed to...
-
Saint Louis, United States Edward Jones Full timeWant a meaningful career where you can make a difference? Edward Jones sounds perfect for you.Collaboration. Autonomy. Opportunity. Words our headquarters associates use when talking about working at Edward Jones. Words that describe what it's like being part of a firm where everyone is aligned toward a singular focus: serving the client. And everyone is...
-
Saint Louis, United States Edward Jones Full timeWant a meaningful career where you can make a difference? Edward Jones sounds perfect for you.Collaboration. Autonomy. Opportunity. Words our headquarters associates use when talking about working at Edward Jones. Words that describe what it's like being part of a firm where everyone is aligned toward a singular focus: serving the client. And everyone is...
-
Saint Louis, United States Edward Jones Full timeWant a meaningful career where you can make a difference? Edward Jones sounds perfect for you.Collaboration. Autonomy. Opportunity. Words our headquarters associates use when talking about working at Edward Jones. Words that describe what it's like being part of a firm where everyone is aligned toward a singular focus: serving the client. And everyone is...
-
Information Security Risk and Controls Analyst
2 months ago
Saint Paul, United States MIDCONTINENT INDEPENDENT SYSTEM OPERATOR INC Full timeJob DescriptionJob DescriptionLocation: Carmel, IN or Eagan, MNAs MISO’s Information Security Risk and Controls Analyst (Senior/Principal), you will be at the forefront of our cybersecurity efforts. Your role will involve identifying risks, determining suitable controls and their owners, spotting gaps, modifying controls, and ensuring they are maintained...
-
Director- Global Security Services
3 weeks ago
Saint Louis, United States Edward Jones Full timeWant a meaningful career where you can make a difference? Edward Jones sounds perfect for you.Collaboration. Autonomy. Opportunity. Words our headquarters associates use when talking about working at Edward Jones. Words that describe what it's like being part of a firm where everyone is aligned toward a singular focus: serving the client. And everyone is...
-
Director- Global Security Services
1 week ago
Saint Louis, United States Edward Jones Full timeWant a meaningful career where you can make a difference? Edward Jones sounds perfect for you.Collaboration. Autonomy. Opportunity. Words our headquarters associates use when talking about working at Edward Jones. Words that describe what it's like being part of a firm where everyone is aligned toward a singular focus: serving the client. And everyone is...
-
Director- Global Security Services
1 week ago
Saint Louis, United States Edward Jones Full timeWant a meaningful career where you can make a difference? Edward Jones sounds perfect for you.Collaboration. Autonomy. Opportunity. Words our headquarters associates use when talking about working at Edward Jones. Words that describe what it's like being part of a firm where everyone is aligned toward a singular focus: serving the client. And everyone is...
-
Lead Operational Risk Officer
5 days ago
St Louis, United States Wells Fargo Full timeAbout this role: Wells Fargo is seeking a Lead Operational Risk Officer. Technology and Information Security Risk Management (TISRM) group is part of Operational Risk Management in Corporate Risk. Learn more about the career areas and lines of business at wellsfargojobs.com . TISRM is a 2nd line of Defense function responsible to oversee 1st line of...
-
Lead Operational Risk Officer
20 hours ago
St. Louis, United States Wells Fargo Full timeAbout this role:Wells Fargo is seeking a Lead Operational Risk Officer. Technology and Information Security Risk Management (TISRM) group is part of Operational Risk Management in Corporate Risk. Learn more about the career areas and lines of business at wellsfargojobs.com .TISRM is a 2nd line of Defense function responsible to oversee 1st line of Defense...
-
Cybersecurity Risk Management Specialist
6 days ago
St Louis, Missouri, United States IT Partners Full timeThe selected candidate will play a crucial role in overseeing security risk management for a logistics and transportation management application. This individual will be a cybersecurity expert capable of advising, implementing, and managing documentation and analysis related to databases, applications, and infrastructure. Key Responsibilities Maintain the...
-
Manager Global Security II
4 weeks ago
Saint Louis, United States Edward Jones Full timeWant a meaningful career where you can make a difference? Edward Jones sounds perfect for you.Collaboration. Autonomy. Opportunity. Words our headquarters associates use when talking about working at Edward Jones. Words that describe what it's like being part of a firm where everyone is aligned toward a singular focus: serving the client. And everyone is...
-
Manager Global Security II
1 week ago
Saint Louis, United States Edward Jones Full timeWant a meaningful career where you can make a difference? Edward Jones sounds perfect for you.Collaboration. Autonomy. Opportunity. Words our headquarters associates use when talking about working at Edward Jones. Words that describe what it's like being part of a firm where everyone is aligned toward a singular focus: serving the client. And everyone is...
