Risk Integration Specialist

CBSbutler Holdings Limited trading as CBSbutler; Reading; Hybrid; GBP 120,000 - 138,000; Full time

Job summary

CBSbutler is seeking a Risk Integration Specialist with active SC clearance to align security risk management across engineering and product security. The role embeds risk processes into engineering workflows and drives risk reporting across the product lifecycle.

You will chair cross-functional groups, work with PSec and executive stakeholders, and define risk controls to support secure product delivery.

Qualifications

• This role requires proven security risk management experience.
• Knowledge of NIST SP 800-30/37/53 and CSF is essential.
• Experience aligning engineering and security functions.

Responsibilities

• Analyse the Risk Integration Plan across engineering and security.
• Develop procedures for transferring security risks between systems.
• Apply NIST risk management frameworks and controls.
• Coordinate across multidisciplinary groups and senior stakeholders.
• Support risk assessments for international transport of units and suppliers.

Skills

Security risk management

Product security

NIST frameworks

Risk assessment

Stakeholder management

SC clearance

Education

Security degree / equivalent

Cert: CISSP/CRISC/CISM

Job description

Risk Integration Specialist - SC Cleared

Location: Reading - Hybrid Working

Contract: 12 Months

IR35: Inside IR35

Clearance: Active SC Clearance Required

Rate: £650 to £750 per day - DOE

Overview

We are seeking an experienced Risk Integration Specialist, working closely with the Product Security Integration Manager to align security risk management across engineering and security functions.

This role will focus on embedding risk management frameworks into engineering workflows, developing formal procedures and ensuring consistent risk assessment, mitigation and reporting throughout the product lifecycle.

You will operate with a high degree of autonomy, chairing multidisciplinary working groups and engaging with engineering teams, Product Security (PSec), Security stakeholders and senior management.

Key Responsibilities

• Analyse the Engineering Security Authorisation to Operate Management Plan and identify opportunities to integrate risk management across engineering and security.
• Develop formal procedures and management plans for transferring and managing security risks between System 1 (products) and System 2 (enabling systems).
• Apply NIST risk management frameworks and standards, including NIST SP 800-30, 800-37, 800-53 and the NIST Cybersecurity Framework.
• Facilitate alignment between engineering and security teams on risk tolerance, assessment, mitigation and acceptance.
• Integrate security risk assessment processes across System 1 and System 2.
• Support the selection of security controls and development of Control Baseline Sets (CBS).
• Assess risk likelihood based on threat levels, vulnerabilities and the effectiveness of security controls.
• Support risk assessments relating to the international transportation of major units and suppliers' manufacturing and test facilities.
• Help define requirements and scope for common security risk management tools.
• Chair cross‑functional working groups, translating engineering requirements into security risk metrics and driving agreed integration activities forward.

Essential Skills & Experience

• Proven experience in security risk management, product security or security risk integration.
• Strong knowledge of NIST frameworks, particularly NIST SP 800‑37 and NIST SP 800‑53.
• Understanding of security risk assessment, threat analysis, vulnerability assessment and mitigation controls.
• Experience developing security management plans, policies and formal procedures.
• Ability to integrate risk management processes across engineering and security functions.
• Strong stakeholder management skills, including facilitating multidisciplinary working groups and engaging senior stakeholders.
• Relevant security qualification, such as CISM or CISSP, or equivalent.
• Good written and verbal English skills.
• Active SC Security Clearance.

Desirable Skills & Qualifications

• Degree or equivalent relevant security experience.
• Knowledge of the NIST Cybersecurity Framework (NIST CSF).
• CRISC certification.
• Knowledge of CNSSI 1253.

Contract Details

• Duration: 12 months
• Location: Reading - hybrid working
• IR35: Inside IR35
• Clearance: Active SC required

This is an excellent opportunity for an SC-cleared security risk professional to play a key role in integrating risk management across engineering and product security within a major programme