Job Description:
Role Overview
Our Security Risk Policies and Controls team part of the global Security function is committed to helping dentsu understand and effectively manage cyber security risks.
As a Security Risk Lead youll play a key role in assessing and reporting cyber security risk globally enabling informed decision-making and oversight of risk reduction initiatives. Youll report directly to our Head of Technology & Security Risk.
Job Description
Your key responsibilities will include:
Conduct regular cyber security risk assessments leveraging data and insights from global and regional stakeholders and using the defined security risk management framework and processes
Support the development of security metrics via reporting dashboards for our global and regional stakeholders
Produce insightful and high-quality management information for monthly security risk reporting and other governance and risk forums highlighting key issues risk indicators and remediation progress.
Manage day-to-day operational security risk tasks such as issues and policy exception requests
Contribute to the ongoing development of our Security GRC platform with a focus on streamlining risk and issue management processes.
Continuously improve risk assessment methodologies to enhance accuracy efficiency and relevance.
Build strong partnerships with our Regional and Practice Area Security teams providing expert guidance on risk and issue management best practices.
This would be a 6-month contract with potential extension up to 12 months.
Candidate Profile
4-5 years of experience in cyber/information security within a global organisation.
Achieved or working towards an information security qualification (CISSP CISM CISA CRISC) (desirable)
Strong working knowledge of ISO 27001
Experience of security compliance initiatives within an enterprise technology environment such as NIST CSF CSA PCI DSS Cyber Essentials OWASP Top 10
Understanding of security risk analysis techniques
Proven ability to prepare and present risk reporting to senior audiences with precision and clarity.
Strong communication and stakeholder engagement skills with confidence in discussing risk topics.
Hands-on experience with ServiceNows IRM capability is a strong advantage.
Understanding of network architecture protocols and principles (desirable)
Ability to explain technical complex concepts to non-technical audiences combined with excellent communication and organisational skills
Knowledge of all domains within security covering people process and technology
Technical experience in using Microsoft PowerBi ServiceNow and other GRC and security platforms advantageous
Is demonstrably self-motivated pro-active action orientated to achieve deadlines
Interest in their own personal development within security risk
Proactive development of trending knowledge and skills within the information security community
Inclusion and Diversity
At Dentsu we embrace diversity and inclusion valuing the unique perspectives and contributions of every individual. We believe that diversity fuels creativity and innovation benefiting our employees partners and communities.
We welcome applications from all individuals regardless of race ethnicity nationality religion gender gender identity sexual orientation age disability marital status or any other protected characteristic. Beyond recruitment we strive to create an environment where everyone feels respected supported and empowered to bring their authentic selves to work.
We recognise the importance of work-life balance and are open to discussing flexible working arrangements for all roles. If you need reasonable adjustments due to a disability or medical condition during our recruitment process please contact us at quoting the reference number of the role that you are applying for. Your needs will be handled with respect and confidentiality to ensure an inclusive and accessible experience
#LI-Hybrid
Location:
Manchester - Bonded WarehouseBrand:
Global TechnologyTime Type:
Full timeContract Type:
Fixed Term Contract (Fixed Term)Required Experience:
Contract