Job Search

We are seeking an experienced Security Risk Manager to lead the identification, assessment and treatment of security risks across a complex organisation. In this role, you will provide expert advice to senior stakeholders, support informed decision-making and help strengthen the organisation’s resilience against operational, information, physical and third-party security threats. You will develop trusted relationships across business and technology teams, promoting a consistent and risk-aware approach to security management.

Your responsibilities will include maintaining the security risk management framework, policies, standards and reporting processes. You will conduct risk assessments, analyse emerging threats, evaluate control effectiveness and agree practical remediation plans with risk owners. You will monitor progress against agreed actions, escalate material risks where appropriate and prepare clear reports, dashboards and briefings for governance forums and senior leadership. The role will also involve supporting security incident reviews, business continuity planning, assurance activities, audits and the assessment of suppliers and strategic partners.

The successful candidate will have proven experience in security, enterprise risk, technology risk, information security or a related discipline, with a strong understanding of risk assessment methodologies, control frameworks and regulatory expectations. Professional qualifications such as CISSP, CISM, CRISC, ISO 27001, IRM or equivalent are desirable. You will be confident interpreting complex information, challenging constructively and communicating clearly with both technical and non-technical audiences. Strong analytical, organisational and stakeholder-management skills are essential, as is the ability to balance risk reduction with commercial and operational priorities. Experience developing governance materials and embedding risk management practices within a large or regulated environment would be advantageous.