Location: Reading, United Kingdom
In fast changing markets, customers worldwide rely on Thales. Thales is a business where brilliant people from all over the world come together to share ideas and inspire each other. In aerospace, transportation, defence, security and space, our architects design innovative solutions that make our tomorrow's possible.
Together we offer fantastic opportunities for committed employees to learn and develop their career with us. At Thales UK, we research, develop, and supply technology and services that impact the lives of millions of people each day to make life better, and keep us safer. We innovate across the major industries of Aerospace, Defence, Security and Space. Your health and well-being matters to us and that's why we offer you the flexibility to do what's important to you; whether that's part time hours, job sharing, home working, or the ability to flex your start and finish times. Where possible, we support a working pattern that suits your lifestyle and helps you reach your ambitions.
Security Risk Analyst (R0253471)
Location - Any UK Site (excluding Belfast) (Hybrid)
Are you looking to build your career as a security risk professional? Do you want the opportunity to work within a highly regarded team that will support with your learning and development? Then look no further...
The Role
We have a unique opportunity for a Security Risk Analyst. It's a key role to support Thales UK identify, assess, and support manage security risks. Maintain and manage risk profiles against security compliance requirements and provide regular reporting to relevant stakeholders.
The successful candidate is responsible for supporting the ongoing management of security risks by promoting relevant policies, processes, guidance to continuously develop and maintain the required level of risk maturity across the organisation.
This role is full time and UK based, with a minimum of 3 days per week in the office.
Key Duties & Responsibilities
* Support the GRC function and the wider Corporate Security Office deliver on the relevant strategy & roadmap for Thales UK
* Analyse technical, physical, environmental and personnel security risks, advise/support relevant stakeholders around risk assessments and controls
* Develop, produce and report on risk metrics to demonstrate correlations and highlight concerns to management/stakeholders
* Support business lines and functions assess their risks and advise them on mitigation strategies
* Promote the security risk management policy and process to help improve security culture across the organisation
* Translate technical jargon into business-focused risk statements, helping the business understand their risks
* Support with maintaining the ISMS through promoting the established risk process, relevant controls and support internal and external assessments
* Monitor and evaluate the effectiveness of security controls to manage risk to acceptable levels
* Support the business in achieving and/or maintaining security accreditations such as ISO 27001, CE+, IPSA, industry related standards, FSC, NIST, etc.
* Deliver training and awareness as necessary on risk management process across the organisation
* Provide subject matter expert input in maintenance of relevant process documentation as required in addition to owning the security risk management process to include co-ordinate, review, update, and communicate as necessary to ensure compliancy and relevance to the business and contractual requirements
* Report and improve metrics/dashboards and create monthly Key Risk Indicators (KRIs), Key performance indicators (KPIs) for the CSO, senior management and other relevant stakeholders as required
* Work closely with other interdependent processes such as Threat Intelligence, Incident Management, Site security management, audits, supply chain management, business management network process and BCP/DR process
* Conduct/support educational workshops, training and awareness campaigns and e-modules on Security Risk management as required
* Create, review and update relevant documentation related to security risk management such as policy, process, ToRs, training, etc.
Skills and Experience
* Minimum of 3 years of experience in a security risk management role
* Experience in monitoring compliance with security accreditations/ standards such as ISO 31000, ISO 27005 and ISO 27001 (or similar security standards)
* Good communication and engagement skills are vital for this role, to be able to articulate ideas, risks and problems in a clear and concise way
* Good analytical skills - being able to take a lot of information, see how to process it and get useful metrics and reporting
* Excellent written skills, able to provide clearly written reports
* Proven ability in problem solving and analytical thinking, being able to provide solutions to complex problems
* Qualifications such as CRISC, CSRM, etc. beneficial but not essential
Thales Benefits
* Annual performance bonus 8%
* Pension contributions up to 7%
* Stock option opportunities
* Generous training budget and allowance to attend conferences/workshops.
* 28 days base holiday (27 days + 1 company holiday in conjunction with Xmas bank holidays)
* Permanent Health Insurance, Critical Illness insurance (optional)
* Private Medical Insurance, Employee Assistance Programme, Healthcare Cash Plan
* Extensive private healthcare plans, gym and well-being memberships, Cycle to Work, Travel Insurance, Holiday Purchase
* Enhanced maternity and parental leave.
* Life insurance; x times of base annual salary
* Discounts on major retail outlets
* Hybrid work
* Flexible hours (37 hrs a week) + Friday half day
This role will require SC Clearance. It would be advantageous if currently held, however, if not currently held, it is a requirement that the successful applicant will undergo, achieve, and maintain SC Clearance.
To be eligible for full SC, you generally need to have resided in the UK for the last 5 years.
For further details of the evidence required to apply for Baseline and Security Clearance please refer to the National Security Vetting (NSV) Agency - United Kingdom Security Vetting - GOV.UK (www.gov.uk)
UKEO (UK Eyes Only)
Due to the nature of the work that we do at Thales, many of our roles are subject to security restrictions. This role requires you to be a UK National and achieve Security Clearance (SC) without any caveats.
At Thales we provide CAREERS and not only jobs. With Thales employing 80,000 employees in 68 countries our mobility policy enables thousands of employees each year to develop their careers at home and abroad, in their existing areas of expertise or by branching out into new fields. Together we believe that embracing flexibility is a smarter way of working.
Thales UK is committed to providing an inclusive and barrier-free recruitment process. We will provide reasonable adjustments and support to ensure neuro-diverse applicants or those with a disability or long-term condition can be their best during the recruitment process.
Great journeys start here, apply now! #J-18808-Ljbffr