Security Risk Lead (6-month FTC)

Dentsu Aegis Network; City Of London; On-site; GBP 60,000 - 80,000; Full time

Job summary

A leading global organization in the United Kingdom is seeking a Security Risk Lead to assess and manage cyber security risks. Responsibilities include conducting risk assessments, developing metrics, and preparing management reporting. The ideal candidate will have 4-5 years of experience in cyber security and strong communication skills. This role offers a fixed-term contract with potential for extension.

Qualifications

• 4-5 years of experience in cyber/information security.
• Achieved or working towards an information security qualification.
• Proven ability to prepare and present risk reporting.

Responsibilities

• Conduct regular cyber security risk assessments.
• Support the development of security metrics via reporting dashboards.
• Produce insightful management information for security risk reporting.

Skills

Cyber/information security experience

Knowledge of ISO 27001

Risk reporting to senior audiences

Experience with ServiceNow

Communication and stakeholder engagement

Education

Information security qualification (CISSP, CISM, CISA, CRISC)

Tools

Microsoft PowerBi

ServiceNow

Job description

Role Overview

Our Security Risk, Policies and Controls team, part of the global Security function, is committed to helping dentsu understand and effectively manage cyber security risks.

As a Security Risk Lead, you’ll play a key role in assessing and reporting cyber security risk globally, enabling informed decision-making and oversight of risk reduction initiatives. You’ll report directly to our Head of Technology & Security Risk.

Job Description

Your key responsibilities will include:

• Conduct regular cyber security risk assessments, leveraging data and insights from global and regional stakeholders and using the defined security risk management framework and processes
• Support the development of security metrics via reporting dashboards for our global and regional stakeholders
• Produce insightful and high-quality management information for monthly security risk reporting and other governance and risk forums, highlighting key issues, risk indicators and remediation progress.
• Manage day-to-day operational security risk tasks, such as issues and policy exception requests
• Contribute to the ongoing development of our Security GRC platform, with a focus on streamlining risk and issue management processes.
• Continuously improve risk assessment methodologies to enhance accuracy, efficiency and relevance.
• Build strong partnerships with our Regional and Practice Area Security teams, providing expert guidance on risk and issue management best practices.

This would be a 6-month contract with potential extension up to 12 months.

Candidate Profile

• 4-5 years of experience in cyber/information security within a global organisation.
• Achieved or working towards an information security qualification (CISSP, CISM, CISA, CRISC) (desirable)
• Strong working knowledge of ISO 27001
• Experience of security compliance initiatives within an enterprise technology environment such as NIST CSF, CSA, PCI DSS, Cyber Essentials, OWASP Top 10
• Understanding of security risk analysis techniques
• Proven ability to prepare and present risk reporting to senior audiences with precision and clarity.
• Strong communication and stakeholder engagement skills, with confidence in discussing risk topics.
• Hands-on experience with ServiceNow's IRM capability is a strong advantage.
• Understanding of network architecture, protocols and principles (desirable)
• Ability to explain technical complex concepts to non-technical audiences combined with excellent communication and organisational skills
• Knowledge of all domains within security covering people, process and technology
• Technical experience in using Microsoft PowerBi, ServiceNow and other GRC and security platforms advantageous
• Is demonstrably self-motivated, pro-active, action orientated to achieve deadlines
• Interest in their own personal development within security risk
• Proactive development of trending knowledge and skills within the information security community

Inclusion and Diversity

At Dentsu, we embrace diversity and inclusion, valuing the unique perspectives and contributions of every individual. We believe that diversity fuels creativity and innovation, benefiting our employees, partners, and communities.

We welcome applications from all individuals, regardless of race, ethnicity, nationality, religion, gender, gender identity, sexual orientation, age, disability, marital status, or any other protected characteristic. Beyond recruitment, we strive to create an environment where everyone feels respected, supported, and empowered to bring their authentic selves to work.

We recognise the importance of work-life balance and are open to discussing flexible working arrangements for all roles. If you need reasonable adjustments due to a disability or medical condition during our recruitment process, please contact us at [e-mail], quoting the reference number of the role that you are applying for. Your needs will be handled with respect and confidentiality to ensure an inclusive and accessible experience

#LI-Hybrid

Location

Location: Manchester - Bonded Warehouse

Brand

Brand: Global Technology

Time Type

Time Type: Full time

Contract Type

Contract Type: Fixed Term Contract (Fixed Term)