Security Assurance & Advisory Principal

Marks and Spencer; Greater London; Hybrid; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Colleague discount 20%

Holiday allowance

Discretionary bonus schemes

Pension and life assurance

Induction and training

Wellbeing support

Job summary

Marks & Spencer is seeking a Security Assurance and Advisory Principal to join our GRC team within an expanding Information Security function. You will support management of our security risk position by ensuring mitigations are in place and their effectiveness is understood.

Reporting into the Assurance and Advisory Lead, you will support a growing team of security assurance analysts, assessing mitigations and guiding remediation as needed.

Qualifications

• Experience in security assurance and risk management practices.

Responsibilities

• Lead security assurance activities to assess mitigations and monitor security risk.
• Provide remediation guidance to strengthen controls and support business transformation.
• Engage with cross-functional stakeholders to align on required actions for risk reduction.
• Produce timely reporting enabling discussions and decision-making on security weaknesses.
• Coach and mentor security assurance analysts and promote best practices.

Skills

Security risk management

Risk reporting

Stakeholder engagement

Mentoring

Job description

Summary

We are seeking a Security Assurance and Advisory Principal to join our GRC team within an expanding and dynamic Information Security function.

All the details

Summary

We are seeking a Security Assurance and Advisory Principal to join our GRC team within an expanding and dynamic Information Security function.

You will support management of our security risk position by ensuring that appropriate mitigations are in place, and their effectiveness is well understood.

Reporting into the Assurance and Advisory Lead, you will support a growing team of security assurance analysts in assessing and quantifying the mitigations to risks faced by M&S, providing guidance on remediation where necessary.

This is a global role that requires cross organisational influence over all areas of the business and technology, to support our mission in the management and reduction of Cyber Risk

What’ll Do

• Lead and support security assurance activity to assess the effectiveness of mitigations managing the M&S security risk position.
• Provide clear remediation and advisory guidance to improve security controls, reduce risk and support transformation across the business.
• Engage with cross-business, technology and risk stakeholders to build a consistent, cohesive view of security risk and required actions.
• Produce clear, accurate and timely reporting that enables effective discussion, prioritisation and decision-making on security risk weaknesses.
• Manage, coach and mentor security assurance analysts, sharing subject matter expertise and promoting best practice across the team and wider stakeholders.

Who You Are

• Lead and support security assurance activity to assess the effectiveness of mitigations managing the M&S security risk position.
• Provide clear remediation and advisory guidance to improve security controls, reduce risk and support transformation across the business.
• Engage with cross-business, technology and risk stakeholders to build a consistent, cohesive view of security risk and required actions.
• Produce clear, accurate and timely reporting that enables effective discussion, prioritisation and decision-making on security risk weaknesses.
• Manage, coach and mentor security assurance analysts, sharing subject matter expertise and promoting best practice across the team and wider stakeholders.

What’s in it for you?

Working at M&S means being part of something bigger - helping to deliver quality, value and service to millions of customers every day. We’re inclusive, fast-moving and always evolving, with a strong sense of purpose and a focus on doing the right thing.

Here are just a few of the benefits that make working here even more rewarding:

• 20% colleague discount on all M&S products and many third-party brands for you and someone in your household, available once you’ve completed your probation
• Competitive holiday allowance with the option to buy more
• Discretionary bonus schemes linked to your performance and ours
• Strong pension and life assurance to help plan for the future
• Tailored induction and training to support your development from day one
• Exclusive perks and savings through our M&S Choices portal
• Market-leading family policies, including parental, adoption and neonatal leave
• 24/7 wellbeing support, including virtual GP access and mental health services
• One paid volunteer day a year to support a cause that matters to you

Everyone’s welcome

We are ambitious about the future of retail. We’re disrupting, innovating and leading the industry into a more conscientious, inspiring digital era. We’re transforming how we work together and offering our most exciting opportunities yet. Marks & Spencer strives to be an inclusive organisation, trusted and admired by our colleagues, customers and suppliers. Join us and make change happen.

We are committed to building diverse and representative teams, where everyone can bring their whole selves to work and be at their best. We support each other and work together to win together.

If you feel you’d benefit from any support or reasonable adjustments during any stage of the recruitment process, please don’t hesitate to let us know when completing your application. This information will be picked up by our team, so we can try and put steps in place to help you be at your best through this process.

#hybridrole