Overview
In this role you support Thales UK by identifying, assessing, and managing security risks within the supply chain. You’ll work with the Security Office to maintain risk profiles, report to stakeholders, and assist suppliers in meeting Defstan and security requirements. You’ll contribute to achieving security accreditations and promote a mature risk culture across the organisation. The position combines risk analysis, policy stewardship, and incident response to strengthen security across UK operations.
Pay / Benefits
- Private medical insurance
- Buying or selling annual leave
- Cycle to work scheme
- Employee discounts
- Paid volunteering day
- Stocks and shares program
Responsibilities
- Support the Supply Chain and GRC function to deliver the strategy and roadmap for Thales UK
- Analyse technical, physical, environmental and personnel security risks and advise on controls
- Assess supplier-related security incidents and support Security Incident Team and stakeholders
- Flow down and manage Defstan 05-138 V4 with Procurement and Suppliers
- Support business lines to assess risks and provide mitigation strategies
- Promote security risk management policy to improve security culture
- Maintain the ISMS and support assessments with established risk processes and controls
- Assist in achieving security accreditations (ISO 27001, CE+, IPSA, NIST, etc.)
- Provide SME input for process documentation and own the risk management process (coordination, review, updates, communication)
- Report and improve metrics; develop KRIs/KPIs for CSO and senior management
- Collaborate with Threat Intelligence, Incident Management, Site Security, audits, BCP/DR
- Conduct training, workshops, and awareness campaigns on Security Risk management and Supply Chain
- Create and update documentation related to security risk management and Supply Chain
Key requirements
- Experience in a Risk Management role
- Experience monitoring compliance with security accreditations/standards (ISO 31000, ISO 27005, ISO 27001)
- Strong communication and engagement skills
- Strong analytical and reporting abilities
- Excellent written communication for reports
- Problem solving and analytical thinking
- CRISC or CSRM qualifications beneficial but not essential
- Communication
- Engagement
- Analytical thinking
- Risk management
- ISMS maintenance
- ISO 31000/27001/27005
Security Supply Chain and Risk Analyst in Crawley employer: Thales Group
Thales is an exceptional employer, offering a dynamic work culture that fosters innovation and collaboration in the heart of Crawley. With a strong commitment to employee growth, we provide extensive training opportunities, competitive benefits including private medical insurance and annual bonuses, and a supportive environment where your contributions directly impact the future of technology. Join us to be part of a team that values diversity, encourages creativity, and prioritises ethical AI solutions.
