About the company
Join a global security risk management function focused on strengthening how organisations identify, quantify, assess, and reduce cyber risk. The role offers opportunities to contribute to the wider open source security ecosystem through knowledge sharing, industry engagement, and thought leadership.
Responsibilities
- Define and continuously improve security risk management standards, frameworks, playbooks, and operating practices
- Analyse existing security risk processes and identify opportunities to improve their effectiveness
- Evaluate, select, and implement new security requirements, tools, methodologies, and risk management practices
- Lead quantified security risk assessments and apply statistical approaches such as FAIR, sensitivity analysis, and other risk modelling techniques
- Translate internal and external cybersecurity risk analyses into clear business terms
- Develop key risk indicators, control indicators, and performance indicators
- Partner with security leadership to communicate risk insights and drive organisational change
- Develop templates, guidance, and self-service materials
- Launch and support security assessment initiatives
- Collaborate with engineering and security teams to promote Secure Development Lifecycle and Security by Design practices
Requirements
- Bachelor's degree in Computer Science, STEM, or a related discipline
- Professional experience in security risk management, security assessments, threat modelling, or a closely related field
- Strong knowledge of security risk management frameworks and methodologies, including quantitative and qualitative risk analysis
- Practical understanding of how to operationalise security risk management
- Experience with Secure Development Lifecycle and Security by Design methodologies
- Strong technical understanding of cybersecurity assessments, risk analysis, and security controls
- Leadership and management capabilities
- Excellent written and verbal business English
- Strong analytical and problem-solving abilities
Conditions
- Compensation tailored to geographical location, experience, and performance
- Performance-driven annual bonus
- Distributed, remote-first working environment
- Twice-yearly in-person team sprints
- USD 2,000 annual personal learning and development budget
- Annual compensation review
- Recognition and performance rewards
- Annual holiday leave
- Maternity and paternity leave
- Employee Assistance Programme
- Priority Pass and travel upgrades for long-haul company events