ROLE SUMMARY
We are looking for a Cyber Risk Analyst/SME to work closely with the business and broader CISO teams to the support the operation of security risk strategy and services. This roles will be offered on a renewable contract basis (inside IR35) or permanent if preferred. The roles will operate mainly remotely.
ROLE RESPONSIBILITIES
- Operational Risk Management: operate metrics for cyber security risk, the cyber security risk management framework, technologies, and processes to ensure cyber security operational and project cyber security risks are adequately managed.
- Third Party Risk Management: operate the cyber security framework, processes, and operating model for managing third party risks as they relate to cyber security. This includes third parties as suppliers and as customers. Support in creating a Handbook for the client as service provider to define step by step guidance on the risk assessment process.
- Operating a framework for Operational Risk Management, as they relate to cyber security.
- Managing the metrics for cyber security risks.
- Support the management of the risks associated with the use third parties.
- The role will be responsible for operating Cyber Risk processes in the UK & International businesses.
- The jobholder will have the capability and experience to manage our cyber security risk framework at a regional level.
SKILLS REQUIRED
- Min 3 years + experience of cyber security risk activities in a medium to large organisation.
- Experience of managing third party cyber security risks in a medium to large organisation.
- Good understanding of risk frameworks.
- Knowledge of cyber security frameworks (ISO 2700x, ISF, NIST etc)
- Good interpersonal skills and experience interfacing with the wider security, technology and business communities
- Able to report on risks and issues to less technical stakeholders.
- Positive can-do attitude and strong attention to detail.
- Using judgement and decision-making
- Planning workload and meeting deadlines