Security Risk Specialist

Overview

In this role you will help implement M&S’s cybersecurity risk assessment framework and embed risk practices across business and technology change. You will create risk statements and scenarios to help stakeholders understand security impact, reporting to the Security Risk Principal and guiding a growing team of analysts. You’ll collaborate with Governance, Risk & Compliance to protect systems and data and support risk awareness training. This is a chance to shape risk governance in a fast-moving, customer-focused retail business.

Pay / Benefits

• 20% colleague discount on M&S products and many third-party brands
• Competitive holiday allowance
• Discretionary bonus schemes
• Strong pension and life assurance
• Tailored induction and training
• Wellbeing support and virtual GP access

Responsibilities

• Deliver and operationalise the new cybersecurity risk assessment framework and processes
• Implement vendor tooling to support the framework
• Draft comprehensive cybersecurity risk reports for governance forums
• Support creation of training on identification and mitigation of cybersecurity risks
• Coach and mentor Cyber Risk Analysts and Associates to progress development plans

Key requirements

• Strong knowledge of cybersecurity risk management and governance, including familiarity with frameworks such as NIST CSF
• Minimum 3 years of cybersecurity risk experience (across sectors such as retail or financial services)
• Awareness of attacker TTPs with ability to analyse problems and identify root causes
• Excellent organisational and time-management skills with stakeholder management and deadline discipline
• Experience building capability in cybersecurity risk processes, methods and tools
• unknown if other requirements exist

• Strong organisational and time-management skills
• Stakeholder management
• Coaching and mentoring capabilities
• Cybersecurity risk management and governance
• Frameworks such as NIST CSF
• Risk assessment methodology

…