Security Risk & Supply Chain Specialist

Thales; Stockport; On-site; GBP 55,000 - 75,000; Full time

Benefits offered by this job

Private medical insurance

Annual bonus

Cycle to work scheme

Employee discounts

Volunteer day

Stocks and shares

Job summary

Thales UK is seeking a Security Supply Chain & Risk Analyst to identify, assess and manage security risks across the supply chain. The role supports procurement and suppliers with Defstan 05-138 V4 requirements and collaborates on Group Cyber Questionnaire assessments.

You will promote risk management processes, coordinate ISMS efforts, and help achieve accreditations such as ISO 27001. This is a full-time, UK-based role with three days per week in the office.

Qualifications

• Experience in a risk management role with security focus.
• Familiarity with security accreditations/standards (ISO 31000, ISO 27005, ISO 27001 or similar).
• Strong written and verbal communication skills for reports and stakeholder engagement.
• Ability to analyse information and produce clear metrics and insights.
• CRISC, CSRM or similar qualifications are advantageous but not required.

Responsibilities

• Support Supply Chain and GRC function and wider Corporate Security Office strategy.
• Analyse security risks across technical, physical, environmental and personnel domains.
• Review supplier security incidents and support Security Incident Team.
• Flow down and manage Defstan 05-138 V4 requirements with procurement.
• Assist in risk assessment and mitigation for business lines and functions.
• Promote the security risk management policy to improve security culture.
• Maintain ISMS promoting risk processes, controls and assessments.
• Support audits and achieve security accreditations (ISO 27001, IPSA, etc.).
• Produce metrics, KRIs and KPIs for CSO and senior stakeholders.
• Coordinate with Threat Intelligence, Incident Management and BCP/DR teams.
• Deliver training/workshops on Security Risk management and Supply Chain.

Skills

Risk Management

Security Compliance

Stakeholder Communication

Analytical Thinking

Report Writing

CRISC/CSRM (beneficial)

Job description

Thales UK is seeking a Security Supply Chain & Risk Analyst to identify, assess and manage security risks across the supply chain. The role supports procurement and suppliers with Defstan 05-138 V4 requirements and collaborates on Group Cyber Questionnaire assessments.

You will promote risk management processes, coordinate ISMS efforts, and help achieve accreditations such as ISO 27001. This is a full-time, UK-based role with three days per week in the office.