Security Risk Management Specialist

Lever, Inc.; France; Sur place; EUR 70 000 - 110 000; Plein temps

Avantages offerts par ce poste

Remote-first working environment

In-person team sprints (twice yearly)

Learning & development budget (USD 2,0

Travel opportunities

Annual compensation review

Employee Assistance Programme

Maternity and paternity leave

Travel upgrades for long-haul events

Résumé du poste

Lever, Inc. is seeking a Security Risk Management Specialist based in France to shape risk standards, frameworks, and practices in a technology-driven environment.

You will analyze risk, model threats, and translate insights into actionable business decisions while collaborating with security leadership across teams. You will contribute to Secure Development Lifecycle and drive continuous improvement in risk processes, with opportunities to engage with the wider security ecosystem and industry

Qualifications

• Bachelor’s degree in Computer Science, STEM, or a related discipline, or a compelling alternative career and professional background.
• Experience in security risk management, security assessments, threat modelling, or a closely related field.
• Strong knowledge of security risk management frameworks and methodologies, including experience applying quantitative and qualitative risk analysis.
• Experience with Secure Development Lifecycle and Security by Design methodologies.

Responsabilités

• Define and continuously improve security risk management standards, frameworks, playbooks, and operating practices.
• Analyse existing security risk processes and identify opportunities to improve their effectiveness, consistency, and scalability.
• Evaluate, select, and implement new security requirements, tools, methodologies, and risk management practices.
• Lead quantified security risk assessments and apply statistical approaches such as FAIR, sensitivity analysis, and other risk modelling techniques.
• Translate internal and external cybersecurity risk analyses into clear business terms and recommend appropriate courses of action.
• Develop key risk indicators, control indicators, and performance indicators to measure security programs and capabilities.
• Partner with security leadership to communicate risk insights, influence decisions, and drive organisational change.
• Develop templates, guidance, and self-service materials that enable teams to manage security risks effectively.
• Launch and support security assessment initiatives designed to identify and mitigate risks across the organisation.
• Monitor risk management activities and continuously identify opportunities to strengthen processes and outcomes.
• Contribute to security learning and development initiatives, including training materials, playbooks, and educational resources.
• Collaborate with engineering and security teams to promote Secure Development Lifecycle and Security by Design practices.
• Help grow security risk management thought leadership through industry engagement, presentations, knowledge sharing, and participation in relevant governance forums.

Connaissances

Security risk management

Threat modelling

Quantitative analysis

Communication skills

English proficiency

Formation

Bachelor's degree in Computer Science / STEM

Description du poste

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Security Risk Management Specialist based in France.

Join a global security risk management function focused on strengthening how organisations identify, quantify, assess, and reduce cyber risk. In this role, you will help shape security risk standards, frameworks, and practices across a complex, technology-driven environment. You will combine established industry methodologies with emerging threat intelligence and innovative approaches to risk modelling. Your work will influence security decisions, engineering practices, learning initiatives, and organisational resilience. You will collaborate closely with security leadership and teams across the organisation to turn risk analysis into actionable business decisions. The role also offers opportunities to contribute to the wider open source security ecosystem through knowledge sharing, industry engagement, and thought leadership.

Accountabilities

• Define and continuously improve security risk management standards, frameworks, playbooks, and operating practices.
• Analyse existing security risk processes and identify opportunities to improve their effectiveness, consistency, and scalability.
• Evaluate, select, and implement new security requirements, tools, methodologies, and risk management practices.
• Lead quantified security risk assessments and apply statistical approaches such as FAIR, sensitivity analysis, and other risk modelling techniques.
• Translate internal and external cybersecurity risk analyses into clear business terms and recommend appropriate courses of action.
• Develop key risk indicators, control indicators, and performance indicators to measure security programs and capabilities.
• Partner with security leadership to communicate risk insights, influence decisions, and drive organisational change.
• Develop templates, guidance, and self-service materials that enable teams to manage security risks effectively.
• Launch and support security assessment initiatives designed to identify and mitigate risks across the organisation.
• Monitor risk management activities and continuously identify opportunities to strengthen processes and outcomes.
• Contribute to security learning and development initiatives, including training materials, playbooks, and educational resources.
• Collaborate with engineering and security teams to promote Secure Development Lifecycle and Security by Design practices.
• Help grow security risk management thought leadership through industry engagement, presentations, knowledge sharing, and participation in relevant governance forums.

Requirements

• Bachelor’s degree in Computer Science, STEM, or a related discipline, or a compelling alternative career and professional background.
• Strong academic track record combined with a demonstrated drive to achieve high standards.
• Professional experience in security risk management, security assessments, threat modelling, or a closely related field.
• Strong knowledge of security risk management frameworks and methodologies, including experience applying quantitative and qualitative risk analysis.
• Practical understanding of how to operationalise security risk management across technical and organisational environments.
• Experience with Secure Development Lifecycle and Security by Design methodologies.
• Strong technical understanding of cybersecurity assessments, risk analysis, and security controls.
• Experience interpreting complex security and risk information and translating it into practical business recommendations.
• Leadership and management capabilities, with the ability to influence stakeholders and drive improvements across teams.
• Excellent written and verbal business English, with strong presentation and communication skills.
• Strong analytical and problem-solving abilities, with a structured and detail-oriented approach to complex challenges.
• Personal motivation to work at the forefront of technology security and continuously develop knowledge of emerging practices and threats.
• A proactive mindset, demonstrated initiative, and a track record of exceeding expectations.

Benefits

• Compensation tailored to geographical location, experience, and performance.
• Performance-driven annual bonus in addition to base compensation.
• Distributed, remote-first working environment.
• Twice-yearly in-person team sprints and opportunities to collaborate with colleagues around the world.
• USD 2,000 annual personal learning and development budget.
• Annual compensation review, with more frequent reviews for graduates and associates.
• Recognition and performance rewards.
• Annual holiday leave.
• Maternity and paternity leave.
• Employee Assistance Programme.
• Opportunities to travel internationally and meet colleagues in different locations.
• Priority Pass and travel upgrades for long-haul company events.