Security Risk and Compliance Management Specialist V - UK

UK - Rackspace Ltd.; Cardiff; On-site; GBP 61,000 - 80,000; Full time

Job summary

Rackspace Technology seeks a Security Risk and Compliance Management Specialist (Level 5) to advance the global information security program. You will create and perform IT risk assessments, develop compliance policies, and monitor assets to reduce financial and reputational exposure.

You will lead cross-functional teams, develop risk assessment processes, and provide data-driven analyses to executives. This role requires expert knowledge of security frameworks and global regulatory requirements.

Qualifications

• Expert-level knowledge of UK NCSC security guidance and requirements.
• Expert-level knowledge of regulatory standards (PCI, ISO27001) and audit practices.
• Expert-level knowledge of IT Risk Management, Governance, Risk and Compliance, Information Security, Data Privacy, Vendor Management, and Business Continuity.

Responsibilities

• Leads cross-functional teams to develop and implement risk framework and compliance solutions.
• Performs complex assessments and ensures regulatory compliance across the enterprise.
• Oversees risk management programs and communicates risk to senior leaders.

Skills

UK NCSC guidance

Regulatory standards (PCI, ISO27001)

IT Risk Management

Governance, Risk & Compliance

Data Privacy

Vendor Management

Business Continuity Management

Security Audits

Education

CRISC

CISM

CISSP

Tools

Java

C++

Python

JavaScript

Network+

CCNP

CISA

ITIL

Job description

Rackspace Technology® is the operator of the full enterprise AI stack from governed private cloud to AI inference and agents in production. With an Outcomes-as-a-Service model built on secure infrastructure, data foundations and forward-deployed engineering, we deliver business results for regulated and mission-critical industries where governance, sovereignty and uptime are non-negotiable. The Security Risk and Compliance Management Specialist (Level 5) acts as an advocate in development of overall information security program globally. You will create and perform global IT Risk and Compliance assessments, and assist in the development and execution of information security, compliance, and risk best practices globally through audits, assessments, and policy-making. We will depend on you to develop systems to control and monitor assets in terms of operational risk, and evaluate alternative means of reducing the company’s exposure to financial loss, reputational damage, and loss of business continuity. You will also set operational risk management policies, and inform senior leaders and other control partners on local and global risk exposure.

Key Responsibilities

• Leads cross-functional team members in strategy development and implementation of risk framework and compliance solutions.
• Independently performs complex and often unique work assignments and problem resolution.
• Serves as the subject matter expert to ensure documents, projects, process, and product initiatives comply with regulatory and legal requirements and enterprise policy.
• Oversees implementation of operational and non-operational risk management programs by providing guidance and assistance to business units with the identification, evaluation, understanding, management, and communication of risk.
• Provides data and analytics in support of the risk officer and risk committees.
• Directs analysis and root cause identification.
• Develops and recommends compliance solutions impacting the enterprise.
• Develops Risk Assessment process, charters, policies, methodologies, and reports.
• Leads cross-functional workgroups, communication strategies, and planning meetings to develop solutions that meet the objectives of both the business and the IT Risk, Compliance, and Information Security team.
• Develops appropriate data and analytics that deliver appropriate data to communicate risk at the executive level.
• Develops training and communication of Information Security, IT Risk, and compliance.
• Maintains expert knowledge of the competitive/regulatory landscape and company's key challenges.
• Coordinates and responds to regulatory requirements and requests, and ensures the execution of examinations.
• Conducts IT Risk and Information Security due diligence activities relative to vendors and third parties.
• Conducts risk assessments and documents findings where the deviation from an information security or IT Risk policy or standard is desired.
• Ensures risk remediation plans meet key business objectives and partners with the business owners to follows through with corrective action steps.
• Provides subject matter expertise on areas of security, privacy and regulatory compliance to Sales, Marketing, Product Development, Legal and Policy teams.
• Conducts detailed analysis of risk rating, risk appetite, and provides data driven summaries to business leaders.
• Documents and provides detailed analysis of findings where deviations exist through internal or external testing.
• Assists policy personnel in technical conversations with policy makers, industry bodies and other third-parties to advance Rackspace’s message.
• Provide feedback to product management in the development of trust-related features, and supports regional security and compliance accreditation projects.
• Develops internal control testing and documented processes.
• Updates internal control matrices where necessary to support annual changing environments.
• Adapts and creates processes as applicable, including changes in processes or reporting metrics.
• Executes as the conduit between internal control owners and external auditors, including kickoff meetings, interview requests, closing meetings, and evidence gathering.
• Executes internal customer audits which include scheduling, presentation of the Rackspace compliance portfolio, and overseeing the successful visit in conjunction with Account Managers.
• Responsible for adhering to company security policies and procedures as directed.
• Assists in annual audits for industry specific reports, including ISO 27001, ISO 9001, ISO 14001, ISO 18001, IRAP-AUS, Cyber Essentials+, NHS DSPT, SOC1, SOC2, SOC3, PCI, HIPAA, HiTrust, CyberGRX.
• Conducts annual audits for industry specific reports, including GDPR, FEDRAM, CDSA.

Required Knowledge

• Expert-level knowledge of UK NCSC security guidance and requirements.
• Expert-level knowledge of various Compliance Regulations/ Standards; PCI, ISO27001, Audit Standard #70, Safe Harbor, HIPAA and FISMA.
• Expert-level knowledge of IT Risk Management, Governance, Risk and Compliance, Information Security, Data Privacy, Vendor Management, and/or Business Continuity Management.
• Certifications CRISC, CISM, CISSP - highly preferred.
• Java, C++, Python, JavaScript, Network+, CCNP, ISA, CAP, CISA, ITIL, GRCP, ISSEP, GCED, GCIA and/or CGEIT - preferred.

The compensation range for this position ranges from £61,388.00/year in our lowest geographic market up to £79,619.00/year in our highest geographic market.

Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience.

The compensation package may also include incentive compensation opportunities in the form of annual bonus or incentives, equity awards and an Employee Stock Purchase Plan (ESPP).

About Rackspace Technology Rackspace Technology is the trusted operator of the full enterprise AI stack, from governed private cloud to AI inference and agents in production. From edge to core to cloud, we operate the infrastructure, data layer, and software integration to deliver business outcomes with the predictable cost, reliability, security, and compliance that regulated and mission‑critical environments demand. We support customers in more than 120 countries with AI capabilities spanning private cloud, public cloud, applications, data and cyber resilience.

More on Rackspace Technology

Though we’re all different, Rackers thrive through our connection to a central goal: to be a valued member of a winning team on an inspiring mission. We bring our whole selves to work every day. And we embrace the notion that unique perspectives fuel innovation and enable us to best serve our customers and communities around the globe.

we are committed to offering equal employment opportunity without regard to age, color, disability, gender reassignment or identity or expression, genetic information, marital or civil partner status, pregnancy or maternity status, military or veteran status, nationality, ethnic or national origin, race, religion or belief, sexual orientation, or any legally protected characteristic.

If you have a disability or special need that requires accommodation, please let us know.

Embrace Technology. Empower Customers. Deliver the Future.

Excellence: We’re an accountable, disciplined, high-performing company with proven results. Customer-driven: We’re proactive, collaborative and committed to success for our customers. Expertise: We’re passionate learners, rooted in our customers’ business to provide unbiased solutions. Agility: We’re adopting new technologies and evolving services to meet customers where they are in their journey. Compassion: We’re one team, doing the right thing for our customers, communities and each other. We’re looking for team members who are ready to unleash their creativity, collaborate with talented coworkers and make a lasting impact in the IT field. Could that be you?