Security Risk Management Specialist

Accountabilities:: Define and continuously improve security risk management standards, frameworks, playbooks, and operating practices. Analyse existing security risk processes and identify opportunities to improve their effectiveness, consistency, and scalability. Evaluate, select, and implement new security requirements, tools, methodologies, and risk management practices. Lead quantified security risk assessments and apply statistical approaches such as FAIR, sensitivity analysis, and other risk modelling techniques. Translate internal and external cybersecurity risk analyses into clear business terms and recommend appropriate courses of action. Develop key risk indicators, control indicators, and performance indicators to measure security programs and capabilities. Partner with security leadership to communicate risk insights, influence decisions, and drive organisational change. Develop templates, guidance, and self-service materials that enable teams to manage security risks effectively. Launch and support security assessment initiatives designed to identify and mitigate risks across the organisation. Monitor risk management activities and continuously identify opportunities to strengthen processes and outcomes. Contribute to security learning and development initiatives, including training materials, playbooks, and educational resources. Collaborate with engineering and security teams to promote Secure Development Lifecycle and Security by Design practices. Help grow security risk management thought leadership through industry engagement, presentations, knowledge sharing, and participation in relevant governance forums. Requirements: Bachelor’s degree in Computer Science, STEM, or a related discipline, or a compelling alternative career and professional background. Strong academic track record combined with a demonstrated drive to achieve high standards. Professional experience in security risk management, security assessments, threat modelling, or a closely related field. Strong knowledge of security risk management frameworks and methodologies, including experience applying quantitative and qualitative risk analysis. Practical understanding of how to operationalise security risk management across technical and organisational environments. Experience with Secure Development Lifecycle and Security by Design methodologies. Strong technical understanding of cybersecurity assessments, risk analysis, and security controls. Experience interpreting complex security and risk information and translating it into practical business recommendations. Leadership and management capabilities, with the ability to influence stakeholders and drive improvements across teams. Excellent written and verbal business English, with strong presentation and communication skills. Strong analytical and problem-solving abilities, with a structured and detail-oriented approach to complex challenges. Personal motivation to work at the forefront of technology security and continuously develop knowledge of emerging practices and threats. A proactive mindset, demonstrated initiative, and a track record of exceeding expectations. Benefits: Compensation tailored to geographical location, experience, and performance. Performance-driven annual bonus in addition to base compensation. Distributed, remote-first working environment. Twice-yearly in-person team sprints and opportunities to collaborate with colleagues around the world. USD 2,000 annual personal learning and development budget. Annual compensation review, with more frequent reviews for graduates and associates. Recognition and performance rewards. Annual holiday leave. Maternity and paternity leave. Employee Assistance Programme. Opportunities to travel internationally and meet colleagues in different locations. Priority Pass and travel upgrades for long-haul company events.