Risk Integration Specialist

ARM International; Reading; Hybrid; GBP 70,000 - 100,000; Part time

Job summary

ARM International is seeking a Risk Integration Specialist in Reading for a 6-month contract with hybrid work patterns (2-3 days on site). The role focuses on integrating security risk management into engineering processes, leveraging NIST standards and governance across the product lifecycle.

Strong communication with executives and stakeholders is essential. Candidate will chair multidisciplinary tables, translate technical needs into risk metrics, and drive risk integration with PSec,

Qualifications

• Diploma or equivalent security qualification.
• Qualifications relating to Information Security Management Systems (e.g., CISM, CISSP).
• Intermediate written and verbal English skills.
• NIST-53, NIST-37.

Responsibilities

• Analyse and have deep knowledge of the Engineering Security Authorization to Operate Management Plan.
• Facilitate cross-functional alignment between Security and Engineering to harmonize risk management.
• Pursue the application of NIST frameworks for risk management to align with international standards.
• Develop a plan to transfer and coherently manage security risks across the product life cycle.
• Coordinate and integrate the process using a common security risk management tool.
• Ensure an integrated security risk assessment process across System 2 with System 1 per NIST SP-30.
• Support risk assessment for international transport of Major Units and supplier facilities.
• Assist in developing CBS and selecting security controls for risk mitigations.

Skills

Security risk management

Stakeholder management

Problem solving

Communication skills

Teamwork

Decision making

Influence on policy

Experience 3+ years

Education

Diploma or security qualification (CISM/CISSP)

NIST-53, NIST-37

Bachelor's degree or security equivalent

NIST CSF; CRISC

CNSSI

Job description

6-Month contract - Inside IR35 - market rate

Reading based - hybrid working - 2-3 days a week onsite

Current and active SC Clearance required for this role

Job Purpose:

The Risk Integration Specialist serves as a strategic link between engineering workflows and Security, operating under high-level guidelines. The role is heavily focused on analysing complex processes to seamlessly integrate comprehensive risk management frameworks, leveraging a solid knowledge of the NIST framework, product security, and advanced compliance practices. Characterized by high autonomy, the professional will independently chair multidisciplinary tables, interfacing smoothly with PSec, Security and executives.

A fundamental requirement is the ability to understand complex integration processes and draft formal procedures to align and integrate the risk management functions of both engineering and security departments. The specialist must possess the specific communication skills required to bridge the gap between engineering and security teams-translating technical needs into risk metrics and vice versa-while actively supporting the scoping and requirements-gathering for risk management tools. Daily activities will focus on participating in engineering workflows to identify precisely where security integrations are needed and subsequently driving those integration efforts forward with the direct support of relevant stakeholders.

Key Accountabilities:

• Analyse and have a deep knowledge of the Engineering Security Authorization to Operate Management Plan
• Facilitate cross-functional alignment between Security and Engineering to harmonize risk management including tolerance and mitigation strategies.
• Pursue the application of NIST frameworks (such as NIST SP -37, -53, NIST CSF, CNNSI ) for the risk management to be aligned with international frameworks
• Develop a management plan to transfer and coherently manage security risks between System 1 (products) and System 2 (enabling system) throughout the product life cycle
• Coordinate and integrate the process utilizing a common security risk management tool across functions for effective and efficient management
• Ensure an integrated security risk assessment process across System 2 with System 1 as per NIST SP -30
• Support to the process of risk assessment for the international transport of Major Units, supplier's manufacturing/test facilities
• Support to development of Control Baseline Set (CBS) and selection of security controls for risk mitigations against potential threats

Ensure the assessment of likelihood scored with threat level and vulnerability (evaluated with security controls)

Skills and experience:

• Strong knowledge of security risk management
• Strong stakeholder management skills with a track record of communicating with senior leadership across multiple functions internally, and externally
• Proven problem solving (forward, lateral thinking) credentials in relation to complex issues
• Capacity to build trustful relationships on all levels of the organisation
• Good written, verbal and presentation skills
• Ability to work within a team
• Manages own areas of responsibility on a project and understands areas of personal responsibility
• At least 3 years of work experience related to job purpose and key accountabilities
• Ability for pragmatic decision making
• Has an influence and impact on business decisions, making a significant contribution to development of policy & approach

Qualifications:

Essential Qualifications:

• Diploma or equivalent security related qualification
• Hold qualifications relating to Information Security Management Systems in line with local Laws and Regulations. For Example CISM, CISSP
• Intermediate written and verbal English skills
• NIST -53, NIST -37

Desirable Qualifications:

• Bachelor's degree or relevant security equivalent qualification/experience
• NIST CSF; CRISC
• CNSSI