Security Risk Manager – London hybrid - £60,000 - £80,000 + Benefits

Locke & McCloud are looking for an experienced Security Risk professional to join our clients growing Cyber Security function. Our client is looking for candidates who have a proven track record in managing security risks associated with third-party vendors, vulnerability management, stakeholder engagement, and remediation efforts. This role requires a deep understanding of cybersecurity principles, strong communication skills, and the ability to collaborate effectively across various departments and external partners.

Main responsibilities:

Manage and oversee all aspects of third-party vendor security risk management, including assessment, monitoring, and mitigation strategies.
Develop and implement third-party risk management programs to ensure compliance with regulatory requirements and industry best practices.
Conduct regular risk assessments of third-party vendors to identify potential vulnerabilities and security gaps.
Collaborate with internal stakeholders to establish vendor security requirements and ensure alignment with security policies.
Coordinate with third-party vendors to remediate identified security vulnerabilities and track progress to resolution.
Establish and maintain effective communication channels with stakeholders to provide updates on security risks and mitigation efforts.
Lead vulnerability management activities, including the identification, prioritisation, and remediation of security vulnerabilities across our client and their vendors and suppliers.
Work with various teams across our clients Cyber Security function on efforts ranging from penetration testing, incident response, governance, risk, and compliance, and more.

To be considered for this role, you should have:

Must have prior experience in a Cyber Security Risk role, ideally with strong skills in vendor/relationship management.
Proven experience in managing third-party vendor relationships and associated security risks.
Strong understanding of vulnerability management processes and tools.
Excellent stakeholder management skills with the ability to effectively communicate technical concepts to non-technical audiences.
Demonstrated ability to lead cross-functional teams and drive consensus on security risk management strategies.
Experience developing and implementing security policies, procedures, and standards.

Our client offers an excellent benefits package including stock options, private medical care, generous annual leave, flexible working, above average mat + pat leave, pension, life assurance, and much more!

If this role is of interest, please apply or reach out to Madison – 0203 854 2230/m.brookes@locke-mccloud.com

Locke & McCloud are the UK’s leading cyber security & information security staffing company – through having a sole focus on the cyber & information security space we have been able to foster solid relationships with some of the UK’s most exciting cyber security consultancies & end users. Our focus on the information security space allows us to be able to help you find the most exciting opportunities in the cyber security market. If you are on the lookout for your next cyber security or information security role, please get in touch!