Security Risk Manager

About the role

The Security Risk Manager will lead risk analysis and remediation across the SLS DWP portfolio, ensuring robust cybersecurity posture and effective incident response. Working closely with the S‑CISO, the role acts as the primary cybersecurity liaison between operational teams, corporate security, and legal departments.

Key responsibilities

• Perform risk assessments on solutions and projects within SLS DWP.
• Coordinate remediation plans with teams and track audit follow‑ups.
• Support resolution of cybersecurity incidents and provide guidance on endpoint, Office 365, and ServiceNow security.
• Maintain and update cybersecurity policies, standards, and procedures in collaboration with internal stakeholders.
• Monitor vulnerabilities and raise alerts for endpoint, server, and application security issues.

Required profile

• Bachelor’s degree in Computer Science, IT or a related field (Master’s preferred).
• Several years of experience in IT infrastructure or cybersecurity.
• Proven ability to work with diverse stakeholders such as auditors, plant management, and legal teams.
• Strong collaboration and problem‑solving skills focused on governance.

Required skills

• Cybersecurity assessment frameworks (e.g., ISO 27001/27002).
• IT infrastructure knowledge: client/server, virtualization, storage, backup & recovery, data‑center and cloud environments.
• IT Service Management (ITSM) processes.
• Endpoint management, Office 365 security, ServiceNow administration.
• Vulnerability monitoring and alerting.

What we offer

• Opportunity to shape cybersecurity strategy within a dynamic organization.
• Collaboration with senior security leadership and cross‑functional teams.