Security Risk & Supply Chain Strategist

Thales Group; Doncaster; Hybrid; GBP 45,000 - 70,000; Full time

Job summary

Thales Group in Doncaster is seeking a Security Supply Chain and Risk Analyst to identify, assess and manage security risks across the supply chain. The role requires coordination with Procurement and suppliers to implement Defstan 05-138 V4 and group security requirements, plus driving risk reporting and KPI/KRIs for senior stakeholders.

The successful candidate will monitor ISMS, support ISO 27001 and related standards, and contribute to security incident response, training and awareness

Qualifications

• Experience in risk management roles.
• Experience with security accreditations/standards (ISO 31000/27001/27005).
• Strong communication and engagement skills.
• Strong analytical abilities and reporting proficiency.
• CRISC or CSRM qualifications are beneficial but not essential.

Responsibilities

• Support Supply Chain and GRC to deliver strategy & roadmap for Thales UK.
• Analyze technical, physical, environmental and personnel security risks.
• Analyze supplier security incidents and support Security Incident Team.
• Flow down and manage Defstan 05-138 V4 with Procurement and Suppliers.
• Promote security risk management policy to improve security culture.
• Maintain ISMS and support assessments and compliance.

Skills

Risk management

ISO 27001

ISO 27005

ISO 31000

CRISC

CSRM

Analytical thinking

Communication

Report writing

Job description

Thales Group in Doncaster is seeking a Security Supply Chain and Risk Analyst to identify, assess and manage security risks across the supply chain. The role requires coordination with Procurement and suppliers to implement Defstan 05-138 V4 and group security requirements, plus driving risk reporting and KPI/KRIs for senior stakeholders.

The successful candidate will monitor ISMS, support ISO 27001 and related standards, and contribute to security incident response, training and awareness