Security Risk Lead (6-month FTC)

Dentsu; Manchester; Hybrid; GBP 100,000 - 125,000; Full time

Job summary

A global technology firm in Manchester seeks a Security Risk Lead on a fixed-term contract. The role involves assessing and reporting cyber security risks, developing metrics for stakeholders, and managing operational security tasks. The ideal candidate will have 4-5 years of cyber security experience and strong communication skills. This position offers a hybrid work model and opportunities for personal development.

Benefits

Flexible working arrangements

Diversity and inclusion initiatives

Qualifications

• 4-5 years of experience in cyber/information security within a global organisation.
• Proven ability to prepare and present risk reporting to senior audiences.
• Hands-on experience with ServiceNow's IRM capability is a strong advantage.

Responsibilities

• Conduct regular cyber security risk assessments.
• Produce management information for security risk reporting.
• Manage day-to-day operational security risk tasks.

Skills

Cyber/information security experience

Communication and stakeholder engagement

Knowledge of ISO 27001

Experience with security compliance initiatives

Risk reporting preparation

Education

Achieved or working towards an information security qualification (CISSP, CISM, CISA, CRISC)

Tools

Microsoft PowerBi

ServiceNow

Job description

Job Description

Our Security Risk, Policies and Controls team, part of the global Security function, is committed to helping dentsu understand and effectively manage cyber security risks.

Role Overview

As a Security Risk Lead, you'll play a key role in assessing and reporting cyber security risk globally, enabling informed decision-making and oversight of risk reduction initiatives. You'll report directly to our Head of Technology & Security Risk.

Your key responsibilities will include:

• Conduct regular cyber security risk assessments, leveraging data and insights from global and regional stakeholders and using the defined security risk management framework and processes
• Support the development of security metrics via reporting dashboards for our global and regional stakeholders
• Produce insightful and high-quality management information for monthly security risk reporting and other governance and risk forums, highlighting key issues, risk indicators and remediation progress.
• Manage day-to-day operational security risk tasks, such as issues and policy exception requests
• Contribute to the ongoing development of our Security GRC platform, with a focus on streamlining risk and issue management processes.
• Continuously improve risk assessment methodologies to enhance accuracy, efficiency and relevance.
• Build strong partnerships with our Regional and Practice Area Security teams, providing expert guidance on risk and issue management best practices.

This would be a 6-month contract with potential extension up to 12 months.

Candidate Profile

• 4-5 years of experience in cyber/information security within a global organisation.
• Achieved or working towards an information security qualification (CISSP, CISM, CISA, CRISC) (desirable)
• Strong working knowledge of ISO 27001
• Experience of security compliance initiatives within an enterprise technology environment such as NIST CSF, CSA, PCI DSS, Cyber Essentials, OWASP Top 10
• Understanding of security risk analysis techniques
• Proven ability to prepare and present risk reporting to senior audiences with precision and clarity.
• Strong communication and stakeholder engagement skills, with confidence in discussing risk topics.
• Hands‑on experience with ServiceNow's IRM capability is a strong advantage.
• Understanding of network architecture, protocols and principles (desirable)
• Ability to explain technical complex concepts to non-technical audiences combined with excellent communication and organisational skills
• Knowledge of all domains within security covering people, process and technology
• Technical experience in using Microsoft PowerBi, ServiceNow and other GRC and security platforms advantageous
• Is demonstrably self‑motivated, pro‑active, action orientated to achieve deadlines
• Interest in their own personal development within security risk
• Proactive development of trending knowledge and skills within the information security community

Inclusion and Diversity

At Dentsu, we embrace diversity and inclusion, valuing the unique perspectives and contributions of every individual. We believe that diversity fuels creativity and innovation, benefiting our employees, partners, and communities.

We welcome applications from all individuals, regardless of race, ethnicity, nationality, religion, gender, gender identity, sexual orientation, age, disability, marital status, or any other protected characteristic. Beyond recruitment, we strive to create an environment where everyone feels respected, supported, and empowered to bring their authentic selves to work.

We recognise the importance of work‑life balance and are open to discussing flexible working arrangements for all roles. If you need reasonable adjustments due to a disability or medical condition during our recruitment process, please contact us at [e-mail], quoting the reference number of the role that you are applying for. Your needs will be handled with respect and confidentiality to ensure an inclusive and accessible experience

#LI-Hybrid

Location

Manchester - Bonded Warehouse

Brand

Global Technology

Time Type

Full time

Contract Type

Fixed Term Contract (Fixed Term)