Security Risk & Supply Chain Analyst

Thales; Doncaster; On-site; GBP 45,000 - 65,000; Full time

Benefits offered by this job

Private medical insurance

Annual bonus

Cycle to work

Job summary

Thales UK is seeking a Security Supply Chain & Risk Analyst to identify, assess and manage security risks across suppliers. You will maintain risk profiles against security requirements and provide regular reporting to stakeholders.

You will support Defstan 05-138 V4 requirements, attend Group Cyber Questionnaire assessments and help drive Cyber Essentials campaigns within a UK-based, full-time role.

Qualifications

• Experience in Risk Management role.
• Experience monitoring compliance with security accreditations/standards such as ISO 31000, ISO 27005 and ISO 27001 (or similar).
• Good communication and engagement skills to articulate risks clearly.
• Excellent written reporting skills.
• CRISC or CSRM qualifications are beneficial but not essential.

Responsibilities

• Support the Supply Chain and GRC function and the wider Corporate Security Office to deliver the strategy for Thales UK.
• Analyse security risks across technical, physical, environmental and personnel domains and advise on controls.
• Analyse supplier security incidents and support the Security Incident Team, engaging relevant stakeholders.
• Flow down and manage Defstan 05-138 V4 with Procurement and suppliers.
• Promote security risk management policy and process to improve security culture.
• Maintain ISMS through promoting risk process and controls; support assessments.
• Help achieve and maintain security accreditations (ISO 27001, NIST, etc.).
• Create and update process documentation for security risk management and supply chain.

Skills

Risk management

Security compliance

Communication

Analytical skills

Written communication

Problem solving

Education

CRISC

CSRM

Job description

Thales UK is seeking a Security Supply Chain & Risk Analyst to identify, assess and manage security risks across suppliers. You will maintain risk profiles against security requirements and provide regular reporting to stakeholders.

You will support Defstan 05-138 V4 requirements, attend Group Cyber Questionnaire assessments and help drive Cyber Essentials campaigns within a UK-based, full-time role.