Cyber Risk Strategy & Governance Lead

Marks and Spencer; Greater London; Hybrid; GBP 70,000 - 90,000; Full time

Benefits offered by this job

20% discount on products

Competitive holiday allowance

Discretionary bonus schemes

Pension and life assurance

Induction and training

Exclusive perks via M&S Choices

Family policies (parental/adoption/nep

Wellbeing support and GP access

Volunteer day

Job summary

Marks & Spencer seeks an experienced Security Risk Specialist to ensure the organisation's security posture remains within tolerance. Lead the implementation of a cybersecurity risk assessment framework, embed risk practices across business and technology change, and support risk statements and scenarios for stakeholders.

You will report to the Security Risk Principal and provide leadership to a growing team of analysts and associates.

Qualifications

• Strong knowledge of cybersecurity risk management and governance, including frameworks such as NIST CSF.
• 3+ years in cybersecurity risk, ideally in retail or financial services.
• Awareness of attacker tactics, techniques and procedures, with root-cause analysis ability.
• Excellent organisational and time-management skills to manage multiple stakeholders.
• Experience building cybersecurity risk processes, methods and tools with adoption.

Responsibilities

• Deliver the new cybersecurity risk assessment framework and supporting processes.
• Implement vendor tooling for the framework.
• Draft risk reports for governance forums with insights on risk posture.
• Support creation of training on risk identification and mitigation.
• Coach and mentor analysts and associates.

Skills

Cybersecurity risk management

NIST CSF

Threat analysis

Stakeholder management

Team coaching

Job description

Marks & Spencer seeks an experienced Security Risk Specialist to ensure the organisation's security posture remains within tolerance. Lead the implementation of a cybersecurity risk assessment framework, embed risk practices across business and technology change, and support risk statements and scenarios for stakeholders.

You will report to the Security Risk Principal and provide leadership to a growing team of analysts and associates.