security risk manager

Parsons

<div>In a world of possibilities, pursue one with endless opportunities. Imagine Next!<br>
<p></p>At Parsons, you can imagine a career where you thrive, work with exceptional people, and be yourself. Guided by our leadership vision of valuing people, embracing agility, and fostering growth, we cultivate an innovative culture that empowers you to achieve your full potential. Unleash your talent and redefine what&rsquo;s possible.<br>
<p></p><p><b>Job Description:
</b></p><p>Parsons is looking for an amazingly talented <b>Security Risk Manager </b><b>(Saudi National) </b>to join our team! In this role you will be responsible for overseeing and implementing security measures within an organization. This role involves developing and maintaining security policies, protocols, and procedures to ensure the safety and protection of personnel, assets, and information. The Security Manager collaborates with various departments to assess risks, identify vulnerabilities, and implement appropriate security controls. They may be responsible for managing security staff, conducting security training and awareness programs, and coordinating emergency response plans. Additionally, the Security Manager may liaise with external stakeholders, such as law enforcement agencies and security service providers, to enhance security measures and stay updated on industry best practices. Strong leadership, analytical skills, and a comprehensive understanding of security technologies and principles are key attributes for success in this role.
</p><p></p><p><b>What You'll Be Doing:
</b></p><ul><li><p>Develop and implement security policies, protocols, and procedures to safeguard personnel, assets, and information.
</p></li><li><p>Conduct regular security risk assessments and audits to identify potential threats and vulnerabilities.
</p></li><li><p>Design and implement physical security measures, such as access control systems, CCTV surveillance, and alarm systems.
</p></li><li><p>Manage and coordinate security staff, including hiring, training, and performance evaluations. Establish and maintain relationships with external stakeholders, such as law enforcement agencies and security service providers.
</p></li><li><p>Monitor and investigate security incidents and breaches, and develop incident response plans.
</p></li><li><p>Stay updated on industry trends, best practices, and emerging security technologies. Conduct security awareness training programs for employees to promote a culture of security awareness.
</p></li><li><p>Collaborate with cross-functional teams to ensure compliance with regulatory requirements related to security. Prepare and present security reports to senior management, highlighting key findings and recommendations.
</p></li></ul><p></p><p><b>What Skills You'll Bring:
</b></p><ul><li><p>Bachelor's degree in engineering, construction management, business administration, or requisite experience.
</p></li><li><p>Minimum of 15 years of experience in project risk management.
</p></li><li><p>Strong knowledge of risk management principles, methodologies, and tools, including but not limited to Monte Carlo simulation, decision tree analysis, and risk registers.
</p></li><li><p>Excellent analytical skills, with the ability to assess complex situations, identify key risks, and develop effective mitigation strategies.
</p></li><li><p>Exceptional communication and interpersonal skills, with the ability to effectively engage with stakeholders at all levels of the organization.
</p></li></ul><p></p>Minimum Clearance Required to Start:
<p></p>Parsons equally employs representation at all job levels no matter the race, color, religion, sex (including pregnancy), national origin, age, disability or genetic information.
<p></p><p>We truly invest and care about our employee&rsquo;s wellbeing and provide endless growth opportunities as the sky is the limit, so aim for the stars! Imagine next and join the Parsons quest&mdash;APPLY TODAY!
</p><p></p><p>Parsons is aware of fraudulent recruitment practices. To learn more about recruitment fraud and how to report it, please refer to https://www.parsons.com/fraudulent-recruitment/ .</p></div>

Security Risk Manager (Saudi National)

Binance

<p>Binance is a leading global blockchain ecosystem behind the world's largest cryptocurrency exchange by trading volume and registered users. We are trusted by over 280 million people in 100+ countries for our industry-leading security, user fund transparency, trading engine speed, deep liquidity, and an unmatched portfolio of digital-asset products. Binance offerings range from trading and finance to education, research, payments, institutional services, Web3 features, and more. We leverage the power of digital assets and blockchain to build an inclusive financial ecosystem to advance the freedom of money and improve financial access for people around the world.</p> <p>The product line Chief Information Security Officer, reporting to the Global Chief Security Officer, aims to develop and implement a comprehensive information security strategy for one of the leading product lines in the Binance product suite. The role will also ensure that the IT Governance and Security Risk Management Systems align to international best practices and adhere to regulatory requirements.</p> Responsibilities <ul> <li>Experience and expertise in Defi security including blockchain, smart contracts, wallet security, and random number generation.</li> <li>Hands on implementation of the IT Security Risk Management function.</li> <li>Lead Security Risk Management with all stakeholders as per Security Risk Framework.</li> <li>Work as part of the three lines of defense model to ensure funds, data and systems are secure.</li> <li>Ensure all security obligations for governance, regulatory and compliance matters are delivered.</li> <li>Assist the delivery of the internal and external audits related to Technology and Security.</li> <li>Drive cyber threat & vulnerability management/penetration tests.</li> <li>IT security risk management for new projects and/or any integration with third party vendors.</li> <li>Manage Third party integrations risk to ensure alignment with security standards and SLAs.</li> <li>Security incident management, including prompt reporting to senior management & other teams.</li> <li>Facilitate continual alignment to regulatory compliance obligations and international standards.</li> </ul> Requirements <ul> <li>Track record of international company experience and cyber security in a regulatory context.</li> <li>A combination of senior management and deep cyber security experience is mandatory.</li> <li>Security community contributor either through published material or international conferences.</li> <li>Demonstrable experience in a global team with a rich multicultural fast paced environment.</li> <li>10+ years of experience in security & technology compliance in a global firm.</li> <li>Bachelor's degree or higher in information technology, cyber security or related field.</li> <li>Track record in self motivated leadership and excellent communication and listening skills.</li> <li>Proven management of cyber security operations with hands on implementation skills.</li> <li>Delivery of best practices for international data privacy and information security frameworks.</li> <li>NIST Cybersecurity & Privacy Framework, ISO 27001/ISO 27701, CIS and PCI-DSS.</li> <li>Must seek excellence by default and show a passion for collaboration and team achievement.</li> <li>Demonstrable experience delivering effective business and technical security solutions.</li> <li>A passion for the latest cyber security trends and emerging threats is essential.</li> </ul> Why Binance <ul> <li>Shape the future with the world's leading blockchain ecosystem</li> <li>Collaborate with world class talent in a user centric global organization with a flat structure</li> <li>Tackle unique, fast paced projects with autonomy in an innovative environment</li> <li>Thrive in a results driven workplace with opportunities for career growth and continuous learning</li> <li>Competitive salary and company benefits</li> <li>Work from home arrangement (the arrangement may vary depending on the work nature of the business team)</li> </ul> <p>Binance is committed to being an equal opportunity employer. We believe that having a diverse workforce is fundamental to our success.</p> <p>By submitting a job application, you confirm that you have read and agree to our <b>Candidate Privacy Notice</b>.</p><img src="https://www.jobg8.com/Tracking.aspx?HLCynLjJI3tWT9C2WCi2uRC2oDMfE1xpv" width="0" height="0" />

Chief Information Security Officer - Product Line

American Express

<div><p>At American Express, our culture is built on a 175-year history of innovation, shared values and Leadership Behaviors, and an unwavering commitment to back our customers, communities, and colleagues. As part of Team Amex, you'll experience this powerful backing with comprehensive support for your holistic well-being and many opportunities to learn new skills, develop as a leader, and grow your career.
</p><p>Here, your voice and ideas matter, your work makes an impact, and together, you will help us define the future of American Express.
</p><p><b>How will you make an impact in this role?
</b></p><p>Responsible for contacting clients with overdue accounts to secure the settlement of the account. Also they do preventive work to avoid future overdues with accounts that have a high exposure.
</p><p>The Information Security Manager function resides within the Regional Information Security Office and is responsible for control enforcement, cybersecurity awareness, reporting and enablement for American Express in Asia Pacific Region. The incumbent will be responsible for helping design and execute a regionalized information security risk management strategy closely informed by the APAC regulatory landscape and AXP business interests, including third party service providers, affiliates, and legal entities.
</p><p>Key responsibilities include:
</p><ul><li>Assist with the interconnection between core enterprise information security functions and American Express Asia-pacific legal entities
</li><li>Contribute to the first line information security risk management and reporting
</li><li>Assess the design and operating effectiveness of information security controls upon which the American Express Asia-pacific legal entities rely to protect Confidentiality, Availability, and Integrity of Information and Systems
</li><li>Collaborate with General Counsel, Market Compliance, and the American Express Privacy Office to support market regulatory requirements
</li><li>Lead the information security related aspects of regulatory changes and projects
</li><li>Identify, scope, and investigate new information security risks, including assisting with assessment of key American Express third-party providers in the region
</li><li>Deliver leadership reporting and risk metrics that demonstrate the effectiveness of the cyber security program to American Express Asia-pacific legal entities.
</li><li>Consult on market-specific Business &amp; Technologies projects to ensure appropriate security protection
</li><li>Craft responses to Information Security audit and examination requirements for the market
</li><li>Operate as part of the extended Information Security team in support of all security and compliance initiatives
</li><li>Collaborate with global teams to publish market specific Information Security KPIs/KRIs
</li><li>Participate in represent regional information security office in APAC risk committees
</li><li>Participate in meetings with regulatory bodies in Asia Pacific and present Information security posture of American Express
</li></ul><p><b>Required Skills:
 </b></p><ul><li>5-10 years of Information Security experience
 </li><li>Experience working with regulators, such as METI, in complex regulated businesses
 </li><li>Broad understanding of information security disciplines with emphasis on vulnerability management, data protection, infrastructure security, application security, identity and access, incident management and data analytics
 </li><li>Strong in risk management. Ability to link threats to risk tolerance and control effectiveness measurements.
 </li><li>Understanding of cyber regulatory landscape in Asia Pacific Region
</li></ul><p><b>Required Work Experience, Education, Certification / Training:
</b></p><ul><li>Bachelor&rsquo;s degree in computer science, information systems, network security or other related field. Master&rsquo;s degree preferred
</li><li>Professional certifications (CISSP, CRISC, CISA, PCI, CISM or equivalent)
</li><li>At least 5 years&rsquo; work experience in information security or technology risk management
</li><li>Technical background with hands-on experience across a variety of technologies
</li><li>Proficiency in information security, risk management and audit (risk/security policies, procedures and controls)
</li></ul><p><b>Required Knowledge, Skills and Abilities:<br>
</b></p><ul><li><div><ul><li>Exceptional verbal and written communication skills
</li><li>Ability to lead and drive discussions on technical matter with senior business stakeholders along with partners and regulators
</li><li>Fluency in English language
</li><li>Requires knowledge of a minimum of several business and technical functional capabilities in some of the following areas: security architecture; security engineering; threat management; vulnerability management; electronic discovery; computer and data breach incident management; data protection; forensics; 3rd party/vendor management; security monitoring; cryptography; cloud security; security operations and administration; access management; security policies and standards; security awareness; business continuity; disaster recovery; IT risk management and controls; web security; data security; network security; system security, technology operations and compliance
</li><li>Strong knowledge and experience in risk assessment and relevant methodologies including quantitative risk management techniques
</li><li>Knowledge of applicable information security standards and regulatory requirements
</li><li>Highly self-motivated and directed
</li><li><p>Keen attention to detail<br>
</p><p></p><p>ORMCM
<br>
Guardian
</p></li></ul></div></li></ul><p>We back you with benefits that support your holistic well-being so you can be and deliver your best. This means caring for you and your loved ones' physical, financial, and mental health, as well as providing the flexibility you need to thrive personally and professionally:
</p><ul><li>Competitive base salaries
</li><li>Bonus incentives
</li><li>Support for financial-well-being and retirement
</li><li>Comprehensive medical, dental, vision, life insurance, and disability benefits (depending on location)
</li><li>Flexible working model with hybrid, onsite or virtual arrangements depending on role and business need
</li><li>Generous paid parental leave policies (depending on your location)
</li><li>Free access to global on-site wellness centers staffed with nurses and doctors (depending on location)
</li><li>Free and confidential counseling support through our Healthy Minds program
</li><li>Career development and training opportunities
</li></ul><p>American Express is an equal opportunity employer and makes employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran status, disability status, age, or any other status protected by law.
</p><p>Offer of employment with American Express is conditioned upon the successful completion of a background verification check, subject to applicable laws and regulations.</p></div>

Manager - Technology Risk & Control

<div><div>Binance is a leading global blockchain ecosystem behind the world&rsquo;s largest cryptocurrency exchange by trading volume and registered users. We are trusted by over 280 million people in 100+ countries for our industry-leading security, user fund transparency, trading engine speed, deep liquidity, and an unmatched portfolio of digital-asset products. Binance offerings range from trading and finance to education, research, payments, institutional services, Web3 features, and more. We leverage the power of digital assets and blockchain to build an inclusive financial ecosystem to advance the freedom of money and improve financial access for people around the world.</div><div></div><div><br>
The product line Chief Information Security Officer, reporting to the Global Chief Security Officer, aims to develop and implement a comprehensive information security strategy for one of the leading product lines in the Binance product suite. The role will also ensure that the IT Governance and Security Risk Management Systems align to international best practices and adhere to regulatory requirements .</div>
<h3 class="jobSectionHeader"><b>Responsibilities</b></h3><ul><li>
Experience and expertise in Defi security including blockchain, smart contracts, wallet security, and random number generation.</li><li>
Hands-on implementation of the IT Security Risk Management function.</li><li>
Lead Security Risk Management with all stakeholders as per Security Risk Framework.</li><li>
Work as part of the three lines of defense model to ensure funds, data and systems are secure.</li><li>
Ensure all security obligations for governance, regulatory and compliance matters are delivered.</li><li>
Assist the delivery of the internal and external audits related to Technology and Security.</li><li>
Drive cyber threat &amp; vulnerability management/penetration tests.</li><li>
IT security risk management for new projects and/or any integration with third party vendors.</li><li>
Manage Third party integrations risk to ensure alignment with security standards and SLAs.</li><li>
Security incident management, including prompt reporting to senior management &amp; other teams.</li><li>
Facilitate continual alignment to regulatory compliance obligations and international standards.</li></ul><div></div><h3 class="jobSectionHeader"><b><br>
Requirements</b></h3><ul><li>
Track record of international company experience and cyber security in a regulatory context.</li><li>
A combination of senior management and deep cyber security experience is mandatory.</li><li>
Security community contributor either through published material or international conferences.</li><li>
Demonstrable experience in a global team with a rich multicultural fast paced environment.</li><li>
10+ years of experience in security &amp; technology compliance in a global firm.</li><li>
Bachelor's degree or higher in information technology, cyber security or related field.</li><li>
Track record in self motivated leadership and excellent communication and listening skills.</li><li>
Proven management of cyber security operations with hands-on implementation skills.</li><li>
Delivery of best practices for international data privacy and information security frameworks.</li><li>
NIST Cybersecurity &amp; Privacy Framework, ISO 27001/ISO 27701, CIS and PCI-DSS.</li><li>
Must seek excellence by default and show a passion for collaboration and team achievement.</li><li>
Demonstrable experience delivering effective business and technical security solutions.</li><li>
A passion for the latest cyber security trends and emerging threats is essential.</li></ul><div><b>
Why Binance</b></div><ul><li>Shape the future with the world&rsquo;s leading blockchain ecosystem</li><li>Collaborate with world-class talent in a user-centric global organization with a flat structure</li><li>Tackle unique, fast-paced projects with autonomy in an innovative environment</li><li>Thrive in a results-driven workplace with opportunities for career growth and continuous learning</li><li>Competitive salary and company benefits</li><li>Work-from-home arrangement (the arrangement may vary depending on the work nature of the business team)</li></ul><div></div><div><br>
Binance is committed to being an equal opportunity employer. We believe that having a diverse workforce is fundamental to our success.</div><div><i>
By submitting a job application, you confirm that you have read and agree to our </i><b><i>Candidate Privacy Notice</i></b><i>.</i></div>
<p>
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.</p></div>

<div><br></div> <div>The product line Chief Information Security Officer, reporting to the Global Chief Security Officer, aims to develop and implement a comprehensive information security strategy for one of the leading product lines in the Binance product suite. The role will also ensure that the IT Governance and Security Risk Management Systems align to international best practices and adhere to regulatory requirements .</div>  <div> <div><b> Responsibilities </b><ul> <ul> <li>Experience and expertise in Defi security including blockchain, smart contracts, wallet security, and random number generation.</li> <li>Hands-on implementation of the IT Security Risk Management function.</li> <li>Lead Security Risk Management with all stakeholders as per Security Risk Framework.</li> <li>Work as part of the three lines of defense model to ensure funds, data and systems are secure.</li> <li>Ensure all security obligations for governance, regulatory and compliance matters are delivered.</li> <li>Assist the delivery of the internal and external audits related to Technology and Security.</li> <li>Drive cyber threat &amp; vulnerability management/penetration tests.</li> <li>IT security risk management for new projects and/or any integration with third party vendors.</li> <li>Manage Third party integrations risk to ensure alignment with security standards and SLAs.</li> <li>Security incident management, including prompt reporting to senior management &amp; other teams.</li> <li>Facilitate continual alignment to regulatory compliance obligations and international standards.</li> <div> <br> </div> </ul> </ul> </div> </div> <div> <div><b> Requirements </b><ul> <ul> <li>Track record of international company experience and cyber security in a regulatory context.</li> <li>A combination of senior management and deep cyber security experience is mandatory.</li> <li>Security community contributor either through published material or international conferences.</li> <li>Demonstrable experience in a global team with a rich multicultural fast paced environment.</li> <li>10+ years of experience in security &amp; technology compliance in a global firm.</li> <li>Bachelor's degree or higher in information technology, cyber security or related field.</li> <li>Track record in self motivated leadership and excellent communication and listening skills.</li> <li>Proven management of cyber security operations with hands-on implementation skills.</li> <li>Delivery of best practices for international data privacy and information security frameworks. </li> <li>NIST Cybersecurity &amp; Privacy Framework, ISO 27001/ISO 27701, CIS and PCI-DSS.</li> <li>Must seek excellence by default and show a passion for collaboration and team achievement.</li> <li>Demonstrable experience delivering effective business and technical security solutions. </li> <li>A passion for the latest cyber security trends and emerging threats is essential.</li> </ul> </ul> </div> </div> <div> <div><br></div></div><div> </div>

Chief Information Security Officer

Mastercard

<div><p><b>Our Purpose</b></p><p></p><p><i>
Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we&rsquo;re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.</i></p><p></p><p><b>
Title and Summary</b></p><p></p>
Regional Security Officer, East Arabia<p></p>
Who is Mastercard?<br>
<br>
Mastercard is a global technology company in the payments industry. Our mission is to connect and power an inclusive, digital economy that benefits everyone, everywhere by making transactions safe, simple, smart, and accessible. Using secure data and networks, partnerships and passion, our innovations and solutions help individuals, financial institutions, governments, and businesses realize their greatest potential.<br>
<br>
Our decency quotient, or DQ, drives our culture and everything we do inside and outside of our company. With connections across more than 210 countries and territories, we are building a sustainable world that unlocks priceless possibilities for all.<br>
<br>
Mission First, People Always<br>
<br>
As Corporate Security, we are responsible for keeping Mastercard safe and secure from cyber and physical threats, and it is our people on the frontlines who make this happen every day.<br>
<br>
By taking care of our people, their wellbeing, and career development, we provide them the necessary tools and environment to ensure the success of our mission.<br>
<br>
Overview<br>
<br>
The Eastern Europe, Middle East &amp; Africa team is looking for a Regional Security Officer for East Arabia to secure our people and business to thrive in a world beyond cash. The successful candidate will play a key role in enhancing Mastercard&rsquo;s brand as a technology-leader. The best-fit candidate will:<br>
<br>
Responsibilities<br>
<br>
<ul><li>Support Enterprise Security Risk Management security programs for East Arabia Division with the Regional Chief Security Officer (RCSO) to protect Mastercard's data, physical assets, and employees.</li><li>Establish and cultivate strong working relationships with the East Arabia Division President, business and market leadership to mitigate risk and serve as a trusted partner and risk advisor.</li><li>Support the RCSO to build trust with external stakeholders, including law enforcement, regulators, security partners, and diplomatic missions.</li><li>Support the RCSO to build trust with internal stakeholders, including Cluster and Country Managers. Marketing and Communications, People Business Partner, Crisis Management, Risk, Legal, Franchise, Public Policy, and Government Sector cross functional partners.</li><li>Serve as first point of contact for EEMEA Managed Services Operations Manager.</li><li>Drive the protective security program (People, Physical, Events, Travel, Executive Protection) to minimize risk to the business.</li><li>Engage and educate employees and senior leadership through support on security awareness and education programs.</li><li>Collaborate closely with Sourcing &amp; Procurement and Legal to manage security risks in contracts and service delivery.</li><li>Manage and/or support regional security incidents and crisis response events in partnership with Crisis Management.</li><li>Support Corporate Security Insider Threat program and investigations through regional liaison.</li><li>Support the East Arabia business in establishing public sector and law enforcement relationships.</li><li>Support EEMEA Regulatory Technology leads for security-related queries and Cluster Briefings.</li><li>Backup the RSO for Arabia West and RCSO for protection across other key divisions &ndash; Eastern Europe and Africa &ndash; as required.</li></ul><br>
All About You<br>
<br>
<ul><li>At least 10 years&rsquo; experience as a security professional.</li><li>Experience working within complex, global organizations, serving high threat markets.</li><li>Proven track record of delivering security services and operations in volatile environments.</li><li>Knowledge of converged security &ndash; protective and information security models.</li><li>Excellent communicator with the ability to influence decision makers.</li><li>Logical thinker with sensitivity to processes.</li><li>Team player with strong communication skills and ability to work under pressure.</li><li>Passion for continuous improvement and working in a dynamic environment.</li><li>Experience working in the Middle East and North Africa.</li><li>Ability to analyze complex threat situations and provide assessments.</li><li>Willingness to travel throughout Eastern Europe, Middle East and Africa (at least 25%).</li><li>Fluent in English; French and Arabic are desirable.</li><li>Certifications in CISM, CISSP, PSP, CPP or equivalent.</li></ul><br>
Corporate Security Responsibility<br>
<br>
Every person working for, or on behalf of, Mastercard is responsible for information security. All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and therefore, it is expected that the successful candidate for this position must:<br>
<br>
<ul><li>Abide by Mastercard&rsquo;s security policies and practices;</li><li>Ensure the confidentiality and integrity of the information being accessed;</li><li>Report any suspected information security violation or breach; and</li><li>Complete all periodic mandatory security trainings in accordance with Mastercard&rsquo;s guidelines.</li></ul><p></p><p><b>
Corporate Security Responsibility</b></p><p><br>
All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:</p><ul><li><p>
Abide by Mastercard&rsquo;s security policies and practices;</p></li><li><p>
Ensure the confidentiality and integrity of the information being accessed;</p></li><li><p>
Report any suspected information security violation or breach, and</p></li><li><p>
Complete all periodic mandatory security trainings in accordance with Mastercard&rsquo;s guidelines.</p></li></ul></div><p></p>

Regional Security Officer, East Arabia

Canonical

<p>Join to apply for the <b>Security Risk Management Specialist</b> role at <b>Canonical</b>.</p> <p>In security risk management we're looking to harness the power of industry best practice combined with driving new innovation on how we do security risk assessments and modelling. Our security risk management team is the primary owner of the strategy and practices of how we identify, track and reduce our security risk across everything we do. To support this we use industry best practices paired with emerging threat information to promote risk identification, quantification, impact analysis, and modelling to drive decision making. In this role you will help establish and execute a broad strategic vision for the security risk program at Canonical. You will work within the team and cross-functionally with various teams across the organisation. The team contributes ideas and requirements for Canonical product security, improving the resilience and robustness of all Ubuntu customers and users subject to cyber attacks. The team collaborates with our Organisational Learning and Development team to develop playbooks and security training across Canonical.</p> <p>The security risk management team's mission is not only to secure Canonical, but also to contribute to the security of the wider open source ecosystem. They may share knowledge through public presentations and industry events, and share threat intelligence with the wider community or represent Canonical in sector-specific governance bodies.</p> What you will do in this role <ul> <li>Define Canonical's security risk management standards and playbooks</li> <li>Analyse and improve Canonical's security risk practices</li> <li>Evaluate, select and implement new security requirements, tools and practices</li> <li>Grow the presence and thought leadership of Canonical security risk management practice</li> <li>Develop Canonical security risk learning and development materials</li> <li>Work with Security leadership to present information and influence change</li> <li>Participate in developing key risk indicators, provide inputs to the development of key control indicators, and key performance indicators for various programs</li> <li>Apply statistical models to risk frameworks (such as FAIR, sensitivity analysis, and others)</li> <li>Participate in risk management, decision-making, and collaborative discussions</li> <li>Lead quantified risk assessments and understand the value of qualitative data for improvements to quality and engineering processes</li> <li>Interpret internal or external cyber security risk analyses in business terms and recommend a responsible course of action</li> <li>Develop templates and materials to help with self-service risk management actions</li> <li>Monitor and identify opportunities to improve the effectiveness of risk management processes</li> <li>Launch campaigns to perform security assessments and help mitigate security risks across the company</li> <li>Build evaluation methods and performance indicators to measure efficiency of security functions and capabilities</li> </ul> What we are looking for <ul> <li>An exceptional academic track record</li> <li>Undergraduate degree in Computer Science or STEM, or a compelling narrative about your alternative path</li> <li>Drive and a track record of going above-and-beyond expectations</li> <li>Deep personal motivation to be at the forefront of technology security</li> <li>Leadership and management ability</li> <li>Excellent business English writing and presentation skills</li> <li>Problem-solver with excellent communication skills, a deep technical understanding of security assessments and risk management</li> <li>Expertise in threat modelling and risk management frameworks</li> <li>Broad knowledge of how to operationalize the management of security risk</li> <li>Experience in Secure Development Lifecycle and Security by Design methodology</li> </ul> What we offer you <ul> <li>Distributed work environment with twice-yearly team sprints in person</li> <li>Personal learning and development budget of USD 2,000 per year</li> <li>Annual compensation review</li> <li>Recognition rewards</li> <li>Annual holiday leave</li> <li>Maternity and paternity leave</li> <li>Employee Assistance Programme</li> <li>Opportunity to travel to new locations to meet colleagues</li> <li>Priority Pass, and travel upgrades for long haul company events</li> </ul> About Canonical <p>Canonical is a pioneering tech firm at the forefront of the global move to open source. As the company that publishes Ubuntu, one of the most important open source projects and the platform for AI, IoT and the cloud, we are changing the world. Canonical has been a remote-first company since its inception in 2004. Working here challenges you to think differently, work smarter, learn new skills, and raise your game. Canonical is an equal opportunity employer.</p> <p>We recruit on a global basis and set a very high standard for people joining the company. We expect excellence. Whatever your identity, we will give your application fair consideration.</p> Seniority level <ul> <li>Entry level</li> </ul> Employment type <ul> <li>Full-time</li> </ul> Job function <ul> <li>Finance and Sales</li> </ul> Industries <ul> <li>Software Development</li> </ul><img src="https://www.jobg8.com/Tracking.aspx?FQXNT6u9OH1JNAkpVNhcnuMRGR%2fAp5PJl" width="0" height="0" />

Security Risk Management Specialist

Search 10000+ Security risk manager jobs near you this October. New roles added regularly across leading industries. Apply today.

10000 security risk manager jobs NEAR_ME

Security Risk Manager (Saudi National)

Chief Information Security Officer - Product Line

Manager - Technology Risk & Control

Chief Information Security Officer - Product Line

Chief Information Security Officer

Regional Security Officer, East Arabia

Security Risk Management Specialist