Security Risk Manager - R0253471

We have a unique opportunity for a Security Risk Manager. It's a key role to support Thales UK identify, assess, promote, liaise and manage security risks. Maintain and manage risk profiles against security compliance requirements and provide regular reporting to relevant stakeholders. The successful candidate is responsible for supporting the ongoing management of security risks by promoting relevant policies, processes, guidance to continuously develop and maintain the required level of maturity across the organisation,

• Support the GRC Manager and the wider Corporate Security Office deliver on the relevant strategy & roadmap for Thales UK
• Analyse technical, physical, environmental and personnel security risks, advise/support relevant stakeholders around risk assessments and controls
• Develop, produce and report on risk metrics to demonstrate correlations and highlight concerns to management/stakeholders
• Support business lines and functions assess their risks and advise them on mitigation strategies such as avoid, reduce, transfer or accept
• Promote the security risk management policy and process to help improve security culture across the organisation
• Translate technical jargon into business-focused risk statements, helping the business understand their risks and present risks to senior management
• Support with maintaining the ISMS through promoting the established risk process, relevant controls and taking part in the relevant internal and external assessments
• Monitor and evaluate the effectiveness of security controls to manage risk to acceptable levels and produce metrics
• Support the business in achieving and/or maintaining security accreditations as relevant such as ISO 27001, CE+, IPSA, etc.
• Deliver training and awareness as necessary on risk management process across the organisation
• Work as part of the GRC team and wider CSO to ensure compliance to industry recognised security certifications/accreditations (such as ISO27001, CE+, CMMC, NIST, FSC, IPSA, etc.)
• Provide subject matter expert input in maintenance of relevant process documentation as required in addition to owning the security risk management process to include co-ordinate, review, update, and communicate as necessary to ensure compliancy and relevance to the business and contractual requirements
• Maintain the GRC: Integrated Risk Management platform in accordance to risk policy and process
• Effective stakeholder engagement to include and not limited to the BL SIROs, IAOs, PSOs, CSO, Site Directors, BL MDs, Board members and other functions/teams as relevant
• Report and improve metrics/dashboards and create monthly Key Risk Indicators (KRIs), Key performance indicators (KPIs) for the CSO, senior management and other relevant stakeholders as required
• Support the business identify new security risks against the context of the organisation such as changes in legal & regulatory requirements, new customers/sector through bids & projects
• Work closely with other interdependent process such as Threat Intelligence, Incident Management, Site security management, audits, supply chain management, business management network process and BCP/DR process
• Perform educational workshops on Security Risk management as required
• Contribute to security training and awareness campaigns and e-modules
• Create, review and update relevant documentation related to security risk management but not limited to such as policy, process, ToRs, training, etc.
  
  Are you looking to build your career as a security risk professional? Do you want the opportunity to work within a highly regarded team that will support with your learning and development? Then look no further..., Demonstrable experience in a mid to senior level strategic security risk management role.
• Proven experience in monitoring compliance with security accreditations/ standards such as ISO 31000, ISO 27005 and ISO 27001 (or similar security standards)
• Good communication and engagement skills are vital for this role, to be able to articulate ideas, risks and problems in a clear and concise way
• Good analytical skills - being able to take a lot of information, see how to process it and get useful metrics and reporting
• Excellent written skills, able to provide clearly written reports
• Proven ability in problem solving and analytical thinking, being able to provide solutions to complex problems
• Qualifications such as CRISC, CSRM, etc. beneficial but not essential
  
  In fast changing markets, customers worldwide rely on Thales. Thales is a business where brilliant people from all over the world come together to share ideas and inspire each other. In aerospace, transportation, defence, security and space, our architects design innovative solutions that make our tomorrow's possible.
Together we offer fantastic opportunities for committed employees to learn and develop their career with us. At Thales UK, we research, develop, and supply technology and services that impact the lives of millions of people each day to make life better, and keep us safer. We innovate across the major industries of Aerospace, Defence, Security and Space. Your health and well-being matters to us and that's why we offer you the flexibility to do what's important to you; whether that's part time hours, job sharing, home working, or the ability to flex your start and finish times. Where possible, we support a working pattern that suits your lifestyle and helps you reach your ambitions., This role is full time and can be worked on a hybrid basis but will be based primarily on site at one of Thales main offices (Crawley, Reading, Cheadle, Templecombe, Glasgow or Doncaster)., At Thales we provide CAREERS and not only jobs. With Thales employing 80,000 employees in 68 countries our mobility policy enables thousands of employees each year to develop their careers at home and abroad, in their existing areas of expertise or by branching out into new fields. Together we believe that embracing flexibility is a smarter way of working.


• Annual performance bonus 8%
• Pension contributions up to 7%
• Stock option opportunities
• Generous training budget and allowance to attend conferences/workshops.
• 28 days base holiday (27 days + 1 company holiday in conjunction with Xmas bank holidays)
• Permanent Health Insurance, Critical Illness insurance (optional)
• Private Medical Insurance, Employee Assistance Programme, Healthcare Cash Plan
• Extensive private healthcare plans, gym and well-being memberships, Cycle to Work, Travel Insurance, Holiday Purchase
• Enhanced maternity and parental leave.
• Life insurance; x times of base annual salary
• Discounts on major retail outlets
• Hybrid work
• Flexible hours (37 hrs a week) + Friday half day