Security Risk & Supply Chain Analyst

Thales; Templecombe; Hybrid; GBP 45,000 - 65,000; Full time

Benefits offered by this job

Private medical insurance

Annual bonus

Cycle to work scheme

Employee discounts

Volunteer day

Stocks and shares

Job summary

Thales UK is seeking a Security Supply Chain & Risk Analyst to identify, assess and manage security risks across suppliers and internal processes. The role supports Defstan 05-138 V4 requirements, Group Cyber Questionnaire, and Cyber Essentials campaigns, with three days per week in the office and a strong emphasis on risk reporting.

The successful candidate will manage risk profiles, coordinate with Procurement and Security teams, and drive continuous improvement in security controls and

Qualifications

• Experience in risk management role.
• Knowledge of security accreditation/standards such as ISO 31000, ISO 27005 and ISO 27001 (or similar).
• Excellent communication and engagement skills to articulate risks clearly.
• Strong analytical ability to process information into actionable metrics and reports.
• Excellent written reporting skills.
• Proven problem solving and analytical thinking abilities.
• CRISC, CSRM or similar qualifications are beneficial but not essential.

Responsibilities

• Support the Supply Chain and GRC function and the Corporate Security Office in delivering the strategy and roadmap for Thales UK.
• Analyse technical, physical, environmental and personnel security risks and advise stakeholders on controls.
• Assess supplier security incidents and support Security Incident Team with relevant stakeholders.
• Assist procurement to flow down and manage Defstan 05-138 V4 requirements.
• Help business lines assess risks and advise on mitigation strategies.
• Promote security risk management policy to improve security culture across the organisation.
• Support ISMS maintenance and verification against established risk processes and controls.
• Assist in achieving and maintaining security accreditations such as ISO 27001, CE+, IPSA, FSC, NIST, etc.
• Provide SME input to process documentation and own the security risk management process for updates and communications.
• Report and improve metrics/dashboards and create monthly KRIs and KPIs for CSO and senior management.
• Collaborate with Threat Intelligence, Incident Management, Site security, audits and BCP/DR processes.
• Conduct workshops, training and awareness campaigns on Security Risk Management and Supply Chain.
• Create and update policy documents, processes and training related to security risk management.

Skills

Risk management

ISO standards knowledge

Communication skills

Analytical skills

Written communication

Problem solving

CRISC/CSRM (beneficial)

Job description

Thales UK is seeking a Security Supply Chain & Risk Analyst to identify, assess and manage security risks across suppliers and internal processes. The role supports Defstan 05-138 V4 requirements, Group Cyber Questionnaire, and Cyber Essentials campaigns, with three days per week in the office and a strong emphasis on risk reporting.

The successful candidate will manage risk profiles, coordinate with Procurement and Security teams, and drive continuous improvement in security controls and