Security Supply Chain and Risk Analyst

WeAreTechWomen; Templecombe; Hybrid; GBP 45,000 - 65,000; Full time

Benefits offered by this job

Private medical insurance

Annual bonus

Cycle to work scheme

Employee discounts

Volunteer day

Stocks and shares

Job summary

Thales UK is seeking a Security Supply Chain & Risk Analyst to identify, assess and manage security risks across suppliers and internal processes. The role supports Defstan 05-138 V4 requirements, Group Cyber Questionnaire, and Cyber Essentials campaigns, with three days per week in the office and a strong emphasis on risk reporting.

The successful candidate will manage risk profiles, coordinate with Procurement and Security teams, and drive continuous improvement in security controls and

Qualifications

• Experience in risk management role.
• Knowledge of security accreditation/standards such as ISO 31000, ISO 27005 and ISO 27001 (or similar).
• Excellent communication and engagement skills to articulate risks clearly.
• Strong analytical ability to process information into actionable metrics and reports.
• Excellent written reporting skills.
• Proven problem solving and analytical thinking abilities.
• CRISC, CSRM or similar qualifications are beneficial but not essential.

Responsibilities

• Support the Supply Chain and GRC function and the Corporate Security Office in delivering the strategy and roadmap for Thales UK.
• Analyse technical, physical, environmental and personnel security risks and advise stakeholders on controls.
• Assess supplier security incidents and support Security Incident Team with relevant stakeholders.
• Assist procurement to flow down and manage Defstan 05-138 V4 requirements.
• Help business lines assess risks and advise on mitigation strategies.
• Promote security risk management policy to improve security culture across the organisation.
• Support ISMS maintenance and verification against established risk processes and controls.
• Assist in achieving and maintaining security accreditations such as ISO 27001, CE+, IPSA, FSC, NIST, etc.
• Provide SME input to process documentation and own the security risk management process for updates and communications.
• Report and improve metrics/dashboards and create monthly KRIs and KPIs for CSO and senior management.
• Collaborate with Threat Intelligence, Incident Management, Site security, audits and BCP/DR processes.
• Conduct workshops, training and awareness campaigns on Security Risk Management and Supply Chain.
• Create and update policy documents, processes and training related to security risk management.

Skills

Risk management

ISO standards knowledge

Communication skills

Analytical skills

Written communication

Problem solving

CRISC/CSRM (beneficial)

Job description

Location: Doncaster, United Kingdom

Thales is a global technology leader with more than 83,000 employees on five continents. With over 7,500 people in the UK, operating across defence, space, aerospace, and digital security, we help build a future we can all trust. Thales supports the security and stability of our nation by providing extraordinary technology to our customers, as well as delivering social value to the UK with our products and services.

Security Supply Chain and Risk Analyst

Are you looking to build your career as a security risk professional? Do you want the opportunity to work within a highly regarded team that will support with your learning and development? Then look no further…

The Role

We have a unique opportunity for aSecurity Supply Chain & Risk Analyst.

This is a key role supporting Thales UK in identifying, assessing, and managing security risks. You will maintain and manage risk profiles against security compliance requirements and provide regular reporting to relevant stakeholders.

You will also support Procurement and Thales UK suppliers withDefstan 05-138 V4requirements, as well as Thales UK and Group security requirements for suppliers. In addition, you will attendGroup Cyber Questionnaireassessments, support theCyber Essentialscampaign, and help investigate supplier security risks and incidents.

The successful candidate will be responsible for supporting supply chain security requirements and responding to incidents and industry notices, as well as the ongoing management of security risks. This includes promoting relevant policies, processes, and guidance to continuously develop and maintain the organisation’s required risk maturity.

This is a full-time UK-basedrole, with a minimum of three days per week in the office.

Key Duties & Responsibilities

• Support the Supply Chain and GRC function and the wider Corporate Security Office deliver on the relevant strategy & roadmap for Thales UK
• Analyse technical, physical, environmental and personnel security risks, advise/support relevant stakeholders around risk assessments and controls
• Analyse supplier related security incidents and support Security Incident Team as well manage relevant stakeholders.
• Support Procurement and Suppliers to flow down and manage Defstan 05-138 V4
• Support business lines and functions assess their risks and advise them on mitigation strategies
• Promote the security risk management policy and process to help improve security culture across the organisation
• Support with maintaining the ISMS through promoting the established risk process, relevant controls and support internal and external assessments
• Support the business in achieving and/or maintaining security accreditations such as ISO 27001, CE+, IPSA, industry related standards, FSC, NIST, etc.
• Provide subject matter expert input in maintenance of relevant process documentation as required in addition to owning the security risk management process to include co-ordinate, review, update, and communicate as necessary to ensure compliancy and relevance to the business and contractual requirements
• Report and improve metrics/dashboards and create monthly Key Risk Indicators (KRIs), Key performance indicators (KPIs) for the CSO, senior management and other relevant stakeholders as required
• Work closely with other interdependent processes such as Threat Intelligence, Incident Management, Site security management, audits, business management network process and BCP/DR process
• Conduct/support educational workshops, training and awareness campaigns and e-modules on Security Risk management and Supply Chain as required
• Create, review and update relevant documentation related to security risk management and Supply Chain such as policy, process, ToRs, training, etc.

Skills and Experience

• Has experience in Risk Management role
• Experience in monitoring compliance with security accreditations/ standards such as ISO 31000, ISO 27005 and ISO 27001 (or similar security standards)
• Good communication and engagement skills are vital for this role, to be able to articulate ideas, risks and problems in a clear and concise way
• Good analytical skills – being able to take a lot of information, see how to process it and get useful metrics and reporting
• Excellent written skills, able to provide clearly written reports
• Proven ability in problem solving and analytical thinking, being able to provide solutions to complex problems
• Qualifications such as CRISC, CSRM, etc. beneficial but not essential

At Thales, we ensure equal opportunities, pay and working conditions for all. The benefits we offer include private medical insurance, buying or selling annual leave, cycle to work schemes, employee discounts, paid volunteering day, stocks and shares, annual bonus and much more depending on the role. Read more about our benefits here.

We are committed to creating a workplace where everyone feels valued for who they are and the unique strengths they bring. Discover more about our programmes, employee networks, wellbeing policies, and inclusive features here.