Security Risk Integration Lead (Hybrid, SC Cleared)

ARM International; Reading; Hybrid; GBP 70,000 - 100,000; Part time

Job summary

ARM International is seeking a Risk Integration Specialist in Reading for a 6-month contract with hybrid work patterns (2-3 days on site). The role focuses on integrating security risk management into engineering processes, leveraging NIST standards and governance across the product lifecycle.

Strong communication with executives and stakeholders is essential. Candidate will chair multidisciplinary tables, translate technical needs into risk metrics, and drive risk integration with PSec,

Qualifications

• Diploma or equivalent security qualification.
• Qualifications relating to Information Security Management Systems (e.g., CISM, CISSP).
• Intermediate written and verbal English skills.
• NIST-53, NIST-37.

Responsibilities

• Analyse and have deep knowledge of the Engineering Security Authorization to Operate Management Plan.
• Facilitate cross-functional alignment between Security and Engineering to harmonize risk management.
• Pursue the application of NIST frameworks for risk management to align with international standards.
• Develop a plan to transfer and coherently manage security risks across the product life cycle.
• Coordinate and integrate the process using a common security risk management tool.
• Ensure an integrated security risk assessment process across System 2 with System 1 per NIST SP-30.
• Support risk assessment for international transport of Major Units and supplier facilities.
• Assist in developing CBS and selecting security controls for risk mitigations.

Skills

Security risk management

Stakeholder management

Problem solving

Communication skills

Teamwork

Decision making

Influence on policy

Experience 3+ years

Education

Diploma or security qualification (CISM/CISSP)

NIST-53, NIST-37

Bachelor's degree or security equivalent

NIST CSF; CRISC

CNSSI

Job description

ARM International is seeking a Risk Integration Specialist in Reading for a 6-month contract with hybrid work patterns (2-3 days on site). The role focuses on integrating security risk management into engineering processes, leveraging NIST standards and governance across the product lifecycle.

Strong communication with executives and stakeholders is essential. Candidate will chair multidisciplinary tables, translate technical needs into risk metrics, and drive risk integration with PSec,