Strategic Security & Supply Chain Risk Analyst

Thales Group; Stockport; On-site; GBP 60,000 - 85,000; Full time

Job summary

Thales UK is seeking a Security Supply Chain & Risk Analyst to identify, assess and manage security risks across suppliers and internal stakeholders. You will support ISMS, risk reporting, compliance with Defstan 05-138 V4, and security accreditations, while working with Procurement and the Security Office to improve risk maturity.

Strong communication, analytical skills and experience in risk management are essential; CRISC/CSRM qualifications are beneficial.

Qualifications

• Experience in a Risk Management role.
• Monitoring compliance with security accreditations/standards such as ISO 31000, ISO 27005 and ISO 27001 (or similar).
• Strong communication and engagement skills are essential.
• Excellent written skills and ability to produce clear reports.
• Strong analytical thinking and problem solving abilities.
• CRISC, CSRM qualifications are beneficial but not essential.

Responsibilities

• Support the Supply Chain and GRC function and the wider Corporate Security Office deliver on the strategy & roadmap for Thales UK.
• Analyse technical, physical, environmental and personnel security risks, advise on risk assessments and controls.
• Analyse supplier related security incidents and support Security Incident Team, managing relevant stakeholders.
• Support Procurement and Suppliers to flow down and manage Defstan 05-138 V4 requirements.
• Promote the security risk management policy to improve security culture across the organisation.
• Maintain ISMS by promoting risk processes and controls; coordinate, review and update documentation.
• Support business lines in assessing risks and advising on mitigation strategies.
• Assist in achieving and maintaining security accreditations (ISO 27001, CE+, IPSA, NIST, etc.).
• Create and communicate monthly KRIs and KPIs for CSO and senior management.
• Collaborate with Threat Intelligence, Incident Management, Site Security, audits, and BCP/DR processes.
• Conduct educational workshops and awareness campaigns on Security Risk management and Supply Chain.

Skills

Risk management

Security compliance

Communication

Analytical skills

Written communication

Problem solving

CRISC/CSRM beneficial

Job description

Thales UK is seeking a Security Supply Chain & Risk Analyst to identify, assess and manage security risks across suppliers and internal stakeholders. You will support ISMS, risk reporting, compliance with Defstan 05-138 V4, and security accreditations, while working with Procurement and the Security Office to improve risk maturity.

Strong communication, analytical skills and experience in risk management are essential; CRISC/CSRM qualifications are beneficial.