Risk Integration Specialist

CBS Butler; Reading; Hybrid; GBP 120,000 - 138,000; Full time

Job summary

CBS Butler is seeking an experienced Risk Integration Specialist with active SC clearance for a 12-month Reading-based role, combining engineering and product security risk management. The position is hybrid and pays £650–£750 per day (DOE).

The successful candidate will embed risk frameworks, lead cross-functional groups, and drive risk reporting across the product lifecycle. Responsibilities include aligning risk processes, developing formal procedures, applying NIST standards, and

Qualifications

• Proven experience in security risk management and product security.
• Strong knowledge of NIST SP 800-37 and 800-53.
• Experience with risk assessment, threat analysis and mitigation.
• Ability to develop security management plans and procedures.
• Excellent stakeholder engagement and cross-functional collaboration.
• Active SC Clearance required.
• Excellent written and verbal English.

Responsibilities

• Analyse Engineering Security Authorization to Operation plan and integrate risk management across engineering and security.
• Develop formal procedures and management plans for transferring and managing security risks between System 1 and System 2.
• Apply NIST risk management frameworks and standards (NIST SP 800-30, 800-37, 800-53 and CSF).
• Facilitate alignment between engineering and security on risk tolerance, assessment, mitigation and acceptance.
• Integrate security risk assessment processes across System 1 and System 2.
• Support the selection of security controls and CBS development.
• Assess risk likelihood based on threats, vulnerabilities and control effectiveness.
• Support risk assessments related to international transportation of major units and suppliers' facilities.
• Help define requirements and scope for common risk management tools.
• Chair cross-functional working groups and translate engineering requirements into risk metrics.

Skills

Risk mgmt

NIST 800-37

NIST 800-53

Risk assessment

Threat analysis

Mitigation controls

Stakeholder mgmt

Engineering integration

CISM

CISSP

Education

CISM

CISSP

Security degree

Job description

Risk Integration Specialist - SC Cleared

Location: Reading - Hybrid Working

Contract: 12 Months

IR35: Inside IR35

Clearance: Active SC Clearance Required

Rate: £650 to £750 per day - DOE

Overview

We are seeking an experienced Risk Integration Specialist, working closely with the Product Security Integration Manager to align security risk management across engineering and security functions.

This role will focus on embedding risk management frameworks into engineering workflows, developing formal procedures and ensuring consistent risk assessment, mitigation and reporting throughout the product life cycle.

You will operate with a high degree of autonomy, chairing multidisciplinary working groups and engaging with engineering teams, Product Security (PSec), Security stakeholders and senior management.

Key Responsibilities

• Analyse the Engineering Security Authorisation to Operate Management Plan and identify opportunities to integrate risk management across engineering and security.
• Develop formal procedures and management plans for transferring and managing security risks between System 1 (products) and System 2 (enabling systems).
• Apply NIST risk management frameworks and standards, including NIST SP 800-30, 800-37, 800-53 and the NIST Cybersecurity Framework.
• Facilitate alignment between engineering and security teams on risk tolerance, assessment, mitigation and acceptance.
• Integrate security risk assessment processes across System 1 and System 2.
• Support the selection of security controls and development of Control Baseline Sets (CBS).
• Assess risk likelihood based on threat levels, vulnerabilities and the effectiveness of security controls.
• Support risk assessments relating to the international transportation of major units and suppliers' manufacturing and test facilities.
• Help define requirements and scope for common security risk management tools.
• Chair cross-functional working groups, translating engineering requirements into security risk metrics and driving agreed integration activities forward.

Essential Skills & Experience

• Proven experience in security risk management, product security or security risk integration.
• Strong knowledge of NIST frameworks, particularly NIST SP 800-37 and NIST SP 800-53.
• Understanding of security risk assessment, threat analysis, vulnerability assessment and mitigation controls.
• Experience developing security management plans, policies and formal procedures.
• Ability to integrate risk management processes across engineering and security functions.
• Strong stakeholder management skills, including facilitating multidisciplinary working groups and engaging senior stakeholders.
• Relevant security qualification, such as CISM or CISSP, or equivalent.
• Good written and verbal English skills.
• Active SC Security Clearance.

Desirable Skills & Qualifications

• Degree or equivalent relevant security experience.
• Knowledge of the NIST Cybersecurity Framework (NIST CSF).
• CRISC certification.
• Knowledge of CNSSI 1253.

Contract Details

• Duration: 12 months
• Location: Reading - hybrid working
• IR35: Inside IR35
• Clearance: Active SC required

This is an excellent opportunity for an SC-cleared security risk professional to play a key role in integrating risk management across engineering and product security within a major programme.