Security Risk Strategy Lead – Hybrid (London/UK)

DXC Technology; Greater London; Hybrid; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Competitive compensation

Pension scheme

Continuous learning & development

Salary sacrifice car scheme

Job summary

DXC Technology is seeking a Security Risk Manager to refresh and manage the security risk program across both heritage and digital IT estates in the London Markets account. You will assess risk posture, ensure coverage, and deliver actionable risk reports, aligning findings with remediation plans and driving continual improvement.

The role collaborates with Vulnerability and Remediation Managers and requires leading risk management initiatives, reporting to leadership, and maintaining governance

Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Risk Management, or a related field.
• Certifications such as CRISC, CISSP, CISM, or ISO 27005 preferred.
• Experience in security risk management or related domains.
• Proven experience managing teams and driving security improvement programs.

Responsibilities

• Redesign and implement a comprehensive security risk management framework.
• Establish KPIs and success criteria for risk posture and mitigation effectiveness.
• Lead the continual improvement program for risk management.
• Assess current risk coverage across the estate.
• Maintain and publish regular reports on risk status, trends, and aged risks.
• Link vulnerability findings and remediation actions to risk items.
• Collaborate with vulnerability and remediation managers to align risk and remediation priorities.
• Work with technical teams to support risk mitigation planning.
• Provide executive-level summaries and technical reports to leadership.
• Align with central corporate policies and maintain risk management standards and procedures.
• Ensure alignment with regulatory requirements and industry best practices.
• Support internal and external audits with documentation and evidence.
• Ensure risk management tools are properly configured and integrated.
• Maintain a risk matrix mapping risks to configuration items, owners, and remediation schedules.

Skills

Security leadership

Risk management

Reporting

Stakeholder communication

Education

Bachelor's degree in Cybersecurity/IT/Risk Management

CRISC/CISSP/CISM/ISO 27005 certifications

Job description

DXC Technology is seeking a Security Risk Manager to refresh and manage the security risk program across both heritage and digital IT estates in the London Markets account. You will assess risk posture, ensure coverage, and deliver actionable risk reports, aligning findings with remediation plans and driving continual improvement.

The role collaborates with Vulnerability and Remediation Managers and requires leading risk management initiatives, reporting to leadership, and maintaining governance