Security Risk Specialist

Marks & Spencer Plc; City of Westminster; Hybrid; GBP 65,000 - 85,000; Full time

Benefits offered by this job

20% colleague discount on M&S products

Competitive holiday allowance

Discretionary bonus schemes

Strong pension and life assurance

Tailored induction and training

M&S Choices portal perks

Family policies (parental/adoption/nep

Neonatal leave

Wellbeing support and virtual GP

Volunteering day

Job summary

Marks & Spencer Plc in the United Kingdom is seeking an experienced Security Risk Specialist to strengthen the organisation's cybersecurity posture and embed risk assessment practices across business and technology change activities.

You will report to the Security Risk Principal, lead a growing team of analysts, deliver the risk framework, generate risk reports, and coach colleagues to progress their development.

Qualifications

• Strong knowledge of cybersecurity risk management and governance, including experience with recognised frameworks such as NIST CSF.
• At least three years’ relevant cybersecurity risk experience, ideally gained across sectors such as retail or financial services.
• Awareness of attacker tactics, techniques and procedures, with the ability to analyse problems and identify root causes.
• Strong organisational and time-management skills, with the ability to manage multiple stakeholders and meet deadlines.
• Experience building capability in cybersecurity risk processes, methods and tools, driving consistent adoption and effective use.

Responsibilities

• Delivery of M&S’s new cybersecurity risk assessment framework and supporting processes.
• Implement vendor tooling to support the risk framework.
• Draft comprehensive cybersecurity risk reports for governance forums.
• Support the creation of training on cybersecurity risk identification and mitigation.
• Coach and mentor Cyber Risk Analysts and Associates.

Skills

Cybersecurity risk management

NIST CSF

Governance & risk

Stakeholder management

Mentoring

Tools

Vendor tooling

Job description

Summary

We are seeking an experienced Security Risk Specialist to ensure that the M&S security posture remains within organisational tolerance levels. You will be supporting the implementation of M&S’ cybersecurity risk assessment framework and related processes, working with the wider Governance, Risk & Compliance team to embed cybersecurity risk assessment practices into M&S business and technology change activities. You will also support the creation of risk statements and scenarios, helping business stakeholders assess and understand the impact of security risk.

You will report to the Security Risk Principal and provide leadership and support to a growing team of analysts and associates.

What you'll do

• Delivery of M&S’ new cybersecurity risk assessment framework and supporting processes to ensure protection of the organisation’s systems and data underpinning key business processes. This will also include supporting the review of M&S risk appetite statements.
• Implement vendor tooling to support M&S’ new cybersecurity risk assessment framework.
• Draft comprehensive cybersecurity risk reports for governance forums that provide insights into M&S’ risk posture and top cybersecurity risks.
• Support the creation of training on the identification and mitigation of cybersecurity risks.
• Coach and mentor Cyber Risk Analysts and Associates, helping them progress against their personal development plans.

Who you are

• Strong knowledge of cybersecurity risk management and governance, including experience with recognised frameworks such as NIST CSF.
• At least three years’ relevant cybersecurity risk experience, ideally gained across sectors such as retail or financial services.
• Awareness of attacker tactics, techniques and procedures, with the ability to analyse problems and identify root causes.
• Strong organisational and time-management skills, with the ability to manage multiple stakeholders and meet deadlines.
• Experience building capability in cybersecurity risk processes, methods and tools, driving consistent adoption and effective use.

What’s in it for you?

Working at M&S means being part of something bigger - helping to deliver quality, value and service to millions of customers every day. We’re inclusive, fast-moving and always evolving, with a strong sense of purpose and a focus on doing the right thing.

Here are just a few of the benefits that make working here even more rewarding:

• 20% colleague discount on all M&S products and many third-party brands for you and someone in your household, available once you’ve completed your probation

• Competitive holiday allowance with the option to buy more

• Discretionary bonus schemes linked to your performance and ours

• Strong pension and life assurance to help plan for the future

• Tailored induction and training to support your development from day one

• Exclusive perks and savings through our M&S Choices portal

• Market-leading family policies, including parental, adoption and neonatal leave

• 24/7 wellbeing support, including virtual GP access and mental health services

• One paid volunteer day a year to support a cause that matters to you

Everyone’s welcome

We are ambitious about the future of retail. We’re disrupting, innovating and leading the industry into a more conscientious, inspiring digital era. We’re transforming how we work together and offering our most exciting opportunities yet. Marks & Spencer strives to be an inclusive organisation, trusted and admired by our colleagues, customers and suppliers. Join us and make change happen.

We are committed to building diverse and representative teams, where everyone can bring their whole selves to work and be at their best. We support each other and work together to win together.

If you feel you'd benefit from any support or reasonable adjustments during any stage of the recruitment process, please don’t hesitate to let us know when completing your application. This information will be picked up by our team, so we can try and put steps in place to help you be at your best through this process.

#LI-hybrid #LI-CC1 #hybridrole