Senior Cyber Risk Manager

Pearson Education; London; On-site; GBP 70,000 - 90,000; Full time

Job summary

A global educational services provider in London is seeking a Senior Manager of Risk to lead cyber risk and third-party risk management functions. The ideal candidate will have proven experience in risk management, strong leadership abilities, and expertise in relevant frameworks. You'll oversee the development and implementation of risk management strategies while managing a small team of professionals. This role offers the chance to shape risk culture and influence organizational strategies.

Qualifications

• Proven experience in cyber risk management or third-party risk management.
• Strong understanding of risk management frameworks (e.g., ISO 31000, NIST CSF).
• Excellent leadership and team management skills.

Responsibilities

• Lead development and implementation of the cyber risk management framework.
• Oversee third-party risk management program and supplier monitoring.
• Manage, coach, and develop a team of cyber risk professionals.

Skills

Cyber risk management

Third-party risk management

Leadership

Analytical skills

Stakeholder engagement

Education

Professional certifications (e.g., CRISC, CISM, CISSP, CISA)

Job description

Role Overview

We are seeking a highly motivated and experienced Senior Manager of Risk to lead our cyber risk and third-party risk management functions within the Cyber Governance, Risk & Compliance (GRC) team. This individual will manage a small team of risk professionals and be responsible for building, embedding, and continuously improving the organisation's cyber risk management framework, ensuring effective oversight of third-party and supplier risks, and supporting executive and board-level reporting.

Key Responsibilities

Cyber Risk Management

• Lead the development, implementation, and ongoing maturity of the cyber risk management framework.
• Oversee risk identification, assessment, treatment, and monitoring across all cyber domains.
• Provide risk insights and reporting to senior leadership, risk committees, and the board.
• Partner with business and technology teams to ensure risks are effectively understood, prioritised, and mitigated.
• Drive risk culture awareness, ensuring risk management principles are embedded across the organisation.

Third-Party Risk Management

• Oversee the third-party risk management (TPRM) programme, including onboarding, due diligence, and ongoing monitoring of suppliers.
• Define risk appetite, assurance requirements, and contractual controls for third-party cyber security.
• Partner with procurement, legal, and business teams to ensure suppliers meet security and compliance requirements.
• Provide risk assessments, recommendations, and remediation guidance to business stakeholders.
• Escalate material supplier risks and lead risk acceptance discussions where required.

Leadership & Team Management

• Manage, coach, and develop a small team of cyber risk and third-party risk professionals.
• Allocate workload effectively and foster a high-performance culture.
• Support professional development and provide clear career growth pathways.
• Act as a senior subject matter expert and escalation point within the Cyber GRC function

Key Skills & Experience

• Proven experience in cyber risk management and/or third-party risk management, ideally within financial services, technology, or a regulated industry.
• Strong understanding of risk management frameworks (e.g., ISO 31000, NIST CSF, FAIR, ISO 27005).
• Experience in third-party/vendor risk management practices, frameworks, and tools.
• Excellent leadership, team management, and stakeholder engagement skills.
• Strong analytical, problem-solving, and decision-making abilities.
• Ability to produce clear, concise, and executive-ready risk reporting.
• Professional certifications desirable (e.g., CRISC, CISM, CISSP, CISA).