GRC Risk Manager

Arm; Cambridge; On-site; GBP 70,000 - 90,000; Full time

Job summary

A global technology company in Cambridge seeks a highly experienced technical risk expert for a key role in their enterprise security team. Candidates should have expertise in cybersecurity, risk quantification, and third-party risk management. The role involves enhancing risk management frameworks and leading assessments, making it ideal for those adept in transforming insights into strategic actions within a dynamic environment.

Benefits

Access to industry-leading security tools

Opportunities for professional growth

Competitive salary and benefits package

Culture valuing transparency and autonomy

Qualifications

• Hands-on experience with risk assessment methodologies and risk quantification.
• Deep knowledge of security technologies and control frameworks such as ISO 27001, NIST CSF.
• Experience in third-party security risk management.

Responsibilities

• Enhance Arm’s Information Security Risk Management Framework within ServiceNow IRM.
• Lead third-party cyber risk management assessments.
• Conduct post-incident reviews and ensure lessons are fed back into the risk register.

Skills

Risk assessment methodologies

Risk quantification

ServiceNow IRM

Cybersecurity frameworks

AI and Automation

Advanced communication

Education

CRISC, CISM, CISSP or FAIR certifications

Job description

Job Overview

At Arm, we’re building the future of computing—securely, at scale, and with purpose. As part of our Enterprise Security team, you’ll help shape how we identify, quantify, and manage risk across the business and our global supply chain.

This is a high-impact role for a highly experienced technical risk expert who thrives in complexity and values innovation. You’ll take the lead on cybersecurity and third-party cyber risk management, risk quantification, and post-incident reviews—translating insights into action, and helping to drive data-driven, risk-informed decisions across Arm.

Responsibilities

• Expertly navigate and enhance Arm’s Information Security Risk Management Framework within ServiceNow IRM, applying qualitative and quantitative risk management principles to empower risk-informed decision-making.
• Lead third-party cyber risk management. Conduct structured assessments, review contracts, and oversee ongoing supplier monitoring.
• Run post-incident reviews: identify root causes, extract systemic insights, and ensure lessons learned are fed back into the control environment and risk register.
• Develop Key Risk and Key Control Indicators to monitor security control effectiveness: guide design and assessment approaches across critical assets and third-party domains.
• Collaborate cross-functionally to reduce risk, ensure accountability and tracking of remediation and improve visibility at speed.

Required Skills and Experience

• Holds certifications such as CRISC, CISM, CISSP or FAIR. Although experience, impact and the courage to challenge matter more than acronyms.
• Must have hands on experience with risk assessment methodologies, risk quantification and ServiceNow IRM.
• Deep knowledge of security technologies and control frameworks such as ISO 27001, NIST CSF and NIST SP800-53.
• Experience in third-party security risk management—comfortable leading assessments, influencing decisions, and challenging skilfully.
• Confident working with metrics, risk and control indicators and data, drawing conclusions, and using dashboards to inform decisions.
• Champion of AI and Automation.
• Advanced communicator: able to translate technical risks into actionable insights and business impact and articulate these to senior leadership.
• Experience with globally distributed teams, large-scale vendor ecosystems and fast-moving, dynamic environments.

In Return

Arm is a global organization powered by a diverse community of high-impact collaborators.

We offer:

• Access to industry-leading security tools, platforms, and processes
• Opportunities to grow alongside some of the best technical minds in the industry
• A competitive salary and benefits package
• A culture that values transparency, autonomy, and measurable impact

#LI-ZN2

Accommodations at Arm

At Arm, we want to build extraordinary teams. If you need an adjustment or an accommodation during the recruitment process, please email [e-mail]. To note, by sending us the requested information, you consent to its use by Arm to arrange for appropriate accommodations. All accommodation or adjustment requests will be treated with confidentiality, and information concerning these requests will only be disclosed as necessary to provide the accommodation. Although this is not an exhaustive list, examples of support include breaks between interviews, having documents read aloud, or office accessibility. Please email us about anything we can do to accommodate you during the recruitment process.

Hybrid Working at Arm

Arm’s approach to hybrid working is designed to create a working environment that supports both high performance and personal wellbeing. We believe in bringing people together face to face to enable us to work at pace, whilst recognizing the value of flexibility. Within that framework, we empower groups/teams to determine their own hybrid working patterns, depending on the work and the team’s needs. Details of what this means for each role will be shared upon application. In some cases, the flexibility we can offer is limited by local legal, regulatory, tax, or other considerations, and where this is the case, we will collaborate with you to find the best solution. Please talk to us to find out more about what this could look like for you.

Equal Opportunities at Arm

Arm is an equal opportunity employer, committed to providing an environment of mutual respect where equal opportunities are available to all applicants and colleagues. We are a diverse organization of dedicated and innovative individuals, and don’t discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.