Summary

This mid-level security risk specialist supports Marks & Spencer’s cybersecurity risk framework and governance processes. The role covers risk assessments across business and technology change, reporting on the organisation’s risk posture, and coaching analysts and associates. The position is hybrid.

Responsibilities

• Implement the cybersecurity risk assessment framework
• Review risk appetite statements and supporting processes
• Draft cybersecurity risk reports for governance forums
• Create training on identifying and mitigating cybersecurity risks
• Coach and mentor cyber risk analysts and associates