Risk Integration Specialist

CBSbutler Holdings Limited trading as CBSbutler; Old Warren; Hybrid; GBP 120.000 - 138.000; Vollzeit

Zusammenfassung

CBSbutler is seeking an experienced Risk Integration Specialist (SC cleared) to align risk management across engineering and security. The role embeds risk frameworks into engineering workflows and develops formal procedures for risk assessment and reporting.

You will chair cross-functional groups, engage with Product Security, security stakeholders and senior leadership, and drive risk integration across multiple domains under a 12-month contract in Reading with hybrid working.

Qualifikationen

• Proven experience in security risk management or product security.
• Knowledge of NIST SP 800-37/800-53 and CSF frameworks.
• Experience embedding risk processes across engineering and security teams.

Aufgaben

• Analyse security risk management across engineering and PSec functions.
• Develop formal procedures for risk transfer between systems.
• Apply NIST risk management standards to risk assessments and controls.
• Coordinate with engineering and security stakeholders to align risk appetite.
• Define risk metrics and drive cross-functional integration activities.

Kenntnisse

Security risk management

NIST frameworks

Stakeholder management

English communication

SC Clearance

Ausbildung

Degree or security experience

CRISC Certification

CISSP Certification

Tools

NIST SP 800-30, 800-37, 800-53

NIST CSF

Jobbeschreibung

Risk Integration Specialist - SC Cleared

Location: Reading - Hybrid Working

Contract: 12 Months

IR35: Inside IR35

Clearance: Active SC Clearance Required

Rate: £650 to £750 per day - DOE

Overview

We are seeking an experienced Risk Integration Specialist, working closely with the Product Security Integration Manager to align security risk management across engineering and security functions.

This role will focus on embedding risk management frameworks into engineering workflows, developing formal procedures and ensuring consistent risk assessment, mitigation and reporting throughout the product lifecycle.

You will operate with a high degree of autonomy, chairing multidisciplinary working groups and engaging with engineering teams, Product Security (PSec), Security stakeholders and senior management.

Key Responsibilities

• Analyse the Engineering Security Authorisation to Operate Management Plan and identify opportunities to integrate risk management across engineering and security.
• Develop formal procedures and management plans for transferring and managing security risks between System 1 (products) and System 2 (enabling systems).
• Apply NIST risk management frameworks and standards, including NIST SP 800-30, 800-37, 800-53 and the NIST Cybersecurity Framework.
• Facilitate alignment between engineering and security teams on risk tolerance, assessment, mitigation and acceptance.
• Integrate security risk assessment processes across System 1 and System 2.
• Support the selection of security controls and development of Control Baseline Sets (CBS).
• Assess risk likelihood based on threat levels, vulnerabilities and the effectiveness of security controls.
• Support risk assessments relating to the international transportation of major units and suppliers' manufacturing and test facilities.
• Help define requirements and scope for common security risk management tools.
• Chair cross-functional working groups, translating engineering requirements into security risk metrics and driving agreed integration activities forward.

Essential Skills & Experience

• Proven experience in security risk management, product security or security risk integration.
• Strong knowledge of NIST frameworks, particularly NIST SP 800-37 and NIST SP 800-53.
• Understanding of security risk assessment, threat analysis, vulnerability assessment and mitigation controls.
• Experience developing security management plans, policies and formal procedures.
• Ability to integrate risk management processes across engineering and security functions.
• Strong stakeholder management skills, including facilitating multidisciplinary working groups and engaging senior stakeholders.
• Relevant security qualification, such as CISM or CISSP, or equivalent.
• Good written and verbal English skills.
• Active SC Security Clearance.

Desirable Skills & Qualifications

• Degree or equivalent relevant security experience.
• Knowledge of the NIST Cybersecurity Framework (NIST CSF).
• CRISC certification.
• Knowledge of CNSSI 1253.

Contract Details

• Duration: 12 months
• Location: Reading - hybrid working
• IR35: Inside IR35
• Clearance: Active SC required

This is an excellent opportunity for an SC-cleared security risk professional to play a key role in integrating risk management across engineering and product security within a major programme