Hybrid Security Supply Chain & Risk Analyst (UK)

Thales; Stockport; Hybrid; GBP 45,000 - 65,000; Full time

Benefits offered by this job

Private medical insurance

Annual leave trading

Cycle to work

Employee discounts

Volunteering day

Stocks and shares

Annual bonus

Job summary

Thales UK is seeking a Security Supply Chain & Risk Analyst to identify, assess and manage security risks across the supply chain. You will maintain risk profiles and report to stakeholders.

In this hybrid, UK-based role, you will support Defstan 05-138 V4, Group Cyber Questionnaire, Cyber Essentials campaigns, incidents, and ISMS maintenance. The role offers exposure to ISO 27001, IPSA, FSC, NIST and cross-functional collaboration.

Qualifications

• Experience in a risk management role within security or cyber contexts.
• Experience monitoring compliance with ISO 31000, ISO 27005 and ISO 27001 or similar standards.
• Strong written and verbal communication to articulate risks clearly.
• Excellent analytical skills and ability to generate useful metrics and reports.
• CRISC or CSRM qualifications are beneficial but not essential.

Responsibilities

• Support the Supply Chain and GRC function and Corporate Security Office to implement strategy and roadmap.
• Analyse security risks across technical, physical, environmental and personnel domains and advise on controls.
• Assess supplier-related security incidents and support the Security Incident Team.
• Help flow down Defstan 05-138 V4 requirements to suppliers and business lines.
• Promote security risk management policy and drive risk awareness across the organization.
• Maintain ISMS processes and support internal and external assessments and audits.
• Contribute to achieving security accreditations (ISO 27001, NIST, IPSA, FSC, CE+).

Skills

Risk Management

Security Compliance

Analytical Skills

Communication Skills

Report Writing

CRISC/CSRM (beneficial)

Job description

Thales UK is seeking a Security Supply Chain & Risk Analyst to identify, assess and manage security risks across the supply chain. You will maintain risk profiles and report to stakeholders.

In this hybrid, UK-based role, you will support Defstan 05-138 V4, Group Cyber Questionnaire, Cyber Essentials campaigns, incidents, and ISMS maintenance. The role offers exposure to ISO 27001, IPSA, FSC, NIST and cross-functional collaboration.