Cyber Risk & Governance Lead

Burberry; Leeds; On-site; GBP 80,000 - 110,000; Full time

Job summary

Burberry is seeking a Cyber Security Risk Manager to lead global cyber risk activities across technology, procurement and business stakeholders. The role focuses on delivering evidence-based cyber risk insights, maintaining the cyber risk register, and supporting governance with clear analysis to inform strategy and investment decisions.

Responsibilities include third-party security assessments, risk reviews, and ensuring risk considerations are embedded into projects, procurement, and supplier

Qualifications

• Experience delivering cyber risk insights to inform strategy and decisions.
• Ability to maintain cyber risk register and governance materials.
• Strong written and verbal communication for Executive and Board-level audiences.

Responsibilities

• Own and maintain delivery plans for cyber risk services and monitor progress.
• Oversee third-party security due diligence and supplier risk assessments.
• Identify, assess, and describe cyber risks from technology and business changes.
• Define remediation plans with owners and track progress to closure.
• Maintain accurate cyber risk register with clear ownership and status.
• Prepare decision-ready materials for senior leaders and the board.

Skills

Cyber risk management

Stakeholder management

Governance reporting

Security controls

Education

Bachelor's degree in Information Security or related field

Tools

NIST/CIS risk framework

Job description

Burberry is seeking a Cyber Security Risk Manager to lead global cyber risk activities across technology, procurement and business stakeholders. The role focuses on delivering evidence-based cyber risk insights, maintaining the cyber risk register, and supporting governance with clear analysis to inform strategy and investment decisions.

Responsibilities include third-party security assessments, risk reviews, and ensuring risk considerations are embedded into projects, procurement, and supplier