Security Risk Manager - R0253471

Greater Reading Area

11/28/2024

Location: Reading, United Kingdom

In fast changing markets, customers worldwide rely on Thales. Thales is a business where brilliant people from all over the world come together to share ideas and inspire each other. In aerospace, transportation, defence, security and space, our architects design innovative solutions that make our tomorrow's possible.

Together we offer fantastic opportunities for committed employees to learn and develop their career with us. At Thales UK, we research, develop, and supply technology and services that impact the lives of millions of people each day to make life better, and keep us safer. We innovate across the major industries of Aerospace, Defence, Security and Space. Your health and well-being matters to us and that’s why we offer you the flexibility to do what’s important to you; whether that’s part time hours, job sharing, home working, or the ability to flex your start and finish times. Where possible, we support a working pattern that suits your lifestyle and helps you reach your ambitions.

Security Risk Manager (R0253471)

Location – Crawley/Reading/Cheadle/Glasgow/Doncaster/Templecombe (Hybrid)

Are you looking to build your career as a security risk professional? Do you want the opportunity to work within a highly regarded team that will support with your learning and development? Then look no further…

The Role

We have a unique opportunity for a Security Risk Manager. It’s a key role to support Thales UK identify, assess, promote, liaise and manage security risks. Maintain and manage risk profiles against security compliance requirements and provide regular reporting to relevant stakeholders.

The successful candidate is responsible for supporting the ongoing management of security risks by promoting relevant policies, processes, guidance to continuously develop and maintain the required level of maturity across the organisation

This role is full time and can be worked on a hybrid basis but will be based primarily on site at one of Thales main offices (Crawley, Reading, Cheadle, Templecombe, Glasgow or Doncaster).

Key Duties & Responsibilities

• Support the GRC Manager and the wider Corporate Security Office deliver on the relevant strategy & roadmap for Thales UK
• Analyse technical, physical, environmental and personnel security risks, advise/support relevant stakeholders around risk assessments and controls
• Develop, produce and report on risk metrics to demonstrate correlations and highlight concerns to management/stakeholders
• Support business lines and functions assess their risks and advise them on mitigation strategies such as avoid, reduce, transfer or accept
• Promote the security risk management policy and process to help improve security culture across the organisation
• Translate technical jargon into business-focused risk statements, helping the business understand their risks and present risks to senior management
• Support with maintaining the ISMS through promoting the established risk process, relevant controls and taking part in the relevant internal and external assessments
• Monitor and evaluate the effectiveness of security controls to manage risk to acceptable levels and produce metrics
• Support the business in achieving and/or maintaining security accreditations as relevant such as ISO 27001, CE+, IPSA, etc.
• Deliver training and awareness as necessary on risk management process across the organisation
• Work as part of the GRC team and wider CSO to ensure compliance to industry recognised security certifications/accreditations (such as ISO27001, CE+, CMMC, NIST, FSC, IPSA, etc.)
• Provide subject matter expert input in maintenance of relevant process documentation as required in addition to owning the security risk management process to include co-ordinate, review, update, and communicate as necessary to ensure compliancy and relevance to the business and contractual requirements
• Maintain the GRC: Integrated Risk Management platform in accordance to risk policy and process
• Effective stakeholder engagement to include and not limited to the BL SIROs, IAOs, PSOs, CSO, Site Directors, BL MDs, Board members and other functions/teams as relevant
• Report and improve metrics/dashboards and create monthly Key Risk Indicators (KRIs), Key performance indicators (KPIs) for the CSO, senior management and other relevant stakeholders as required
• Support the business identify new security risks against the context of the organisation such as changes in legal & regulatory requirements, new customers/sector through bids & projects
• Work closely with other interdependent process such as Threat Intelligence, Incident Management, Site security management, audits, supply chain management, business management network process and BCP/DR process
• Perform educational workshops on Security Risk management as required
• Contribute to security training and awareness campaigns and e-modules
• Create, review and update relevant documentation related to security risk management but not limited to such as policy, process, ToRs, training, etc.
  
  
  

Skills And Experience

• Demonstrable experience in a mid to senior level strategic security risk management role.
• Proven experience in monitoring compliance with security accreditations/ standards such as ISO 31000, ISO 27005 and ISO 27001 (or similar security standards)
• Good communication and engagement skills are vital for this role, to be able to articulate ideas, risks and problems in a clear and concise way
• Good analytical skills – being able to take a lot of information, see how to process it and get useful metrics and reporting
• Excellent written skills, able to provide clearly written reports
• Proven ability in problem solving and analytical thinking, being able to provide solutions to complex problems
• Qualifications such as CRISC, CSRM, etc. beneficial but not essential
  
  
  

Thales Benefits

• Annual performance bonus 8%
• Pension contributions up to 7%
• Stock option opportunities
• Generous training budget and allowance to attend conferences/workshops.
• 28 days base holiday (27 days + 1 company holiday in conjunction with Xmas bank holidays)
• Permanent Health Insurance, Critical Illness insurance (optional)
• Private Medical Insurance, Employee Assistance Programme, Healthcare Cash Plan
• Extensive private healthcare plans, gym and well-being memberships, Cycle to Work, Travel Insurance, Holiday Purchase
• Enhanced maternity and parental leave.
• Life insurance; x times of base annual salary
• Discounts on major retail outlets
• Hybrid work
• Flexible hours (37 hrs a week) + Friday half day
  
  
  

This role will require SC Clearance. It would be advantageous if currently held, however, if not currently held, it is a requirement that the successful applicant will undergo, achieve, and maintain SC Clearance. Please visit the UKSV website for further guidance.

To be eligible for full SC, you generally need to have resided in the UK for the last 5 years. In some circumstances, a minimum of 3 years’ residence in the UK over the last 5 years may be accepted, with additional overseas checks.

For further details of the evidence required to apply for Baseline and Security Clearance please refer to the National Security Vetting (NSV) Agency - United Kingdom Security Vetting - GOV.UK (www.gov.uk)

UKEO (UK Eyes Only)

Due to the nature of the work that we do at Thales, many of our roles are subject to security restrictions. This role requires you to be a UK National and achieve Security Clearance (SC) without any caveats. It would be advantageous if currently held, however, if not currently held, it is a requirement that the successful applicant undergo, achieve, and maintain SC Clearance prior to commencing employment. If approved by the MOD, a dual national from a Non-ITAR country may be considered. Please visit the UKSV web

site for further guidance.

To be eligible for full SC, you generally need to have resided in the UK for the last 5 years. In some circumstances, a minimum of 3 years’ residence in the UK over the last 5 years may be accepted, with additional overseas checks.

UKEO British (UK Eyes Only British)

Due to the nature of the work that we do at Thales, many of our roles are subject to security restrictions. This role requires you to be a sole British National from birth and achieve Security Clearance (SC) without any caveats. It would be advantageous if currently held, however, if not currently held, it is a requirement that the successful applicant undergo, achieve, and maintain SC Clearance prior to commencing employment. Please visit the UKSV website for further guidance.

To be eligible for full SC, you generally need to have resided in the UK for the last 5 years. In some circumstances, a minimum of 3 years’ residence in the UK over the last 5 years may be accepted, with additional overseas checks.

In line with Thales' Baseline Security requirements, candidates will be asked to provide evidence of identity, eligibility to work in the UK and employment and/or education history for up to three years. Some vacancies may require full Security Clearance which can require further evidence to be provided. For further details of the evidence required to apply for Baseline and Security Clearance please refer to the Defence Business Services National Security Vetting (DBS NSV) Agency.

At Thales we provide CAREERS and not only jobs. With Thales employing 80,000 employees in 68 countries our mobility policy enables thousands of employees each year to develop their careers at home and abroad, in their existing areas of expertise or by branching out into new fields. Together we believe that embracing flexibility is a smarter way of working.

Thales UK is committed to providing an inclusive and barrier-free recruitment process. We will provide reasonable adjustments and support to ensure neuro-diverse applicants or those with a disability or long-term condition can be their best during the recruitment process. To request an adjustment, if you need this job advert in an alternative format or if you have any questions about the recruitment process, please contact Resourcing Ops for mid to senior roles, or the Early Careers Team for graduate and apprentice roles.

Great journeys start here, apply now!