Cyber Security Risk Manager

In this role, you will provide evidence-based cyber risk insight to inform strategy and investment, embedding security requirements across projects, procurement and supplier relationships. You will manage governance, risk assessments and the cyber risk register on a global scale, collaborating with technology, procurement and business stakeholders. You’ll translate complex security concepts into business terms for executives and the Board, driving practical risk treatment. This is a mission-driven role at a values-led brand focused on sustainable luxury.

• Delivery planning and coordination for risk services
• Oversee third-party security due diligence and external vendors
• Identify and assess cyber risks from technology, changes, and suppliers
• Define proportionate remediation plans and track milestones
• Maintain and update the cyber risk register
• Prepare executive reporting and decision-ready risk materials
• Cyber security governance, policy standards development, and due diligence
• Author and maintain practical cyber security policies and standards
• Promote risk culture, awareness, and risk-informed decision-making
• Pursue continuous improvement of risk processes and templates

• Broad knowledge of information and cyber security
• Experience in cyber risk assessment and articulating risk in business terms
• Proven ability to embed cyber security into contracts, procurement and projects
• Strong planning, prioritisation and delivery discipline
• Experience in producing governance reports for Executives and Board
• Ability to communicate with technical and non-technical audiences
• Maintaining risk records and closure of remediation actions
• Analytical skills to interpret incomplete information and derive conclusions
• High attention to detail and concise documentation

• Excellent stakeholder management and relationship skills
• Clear, concise communication
• Ability to challenge constructively and influence decisions
• Cyber risk management
• Governance, policy and standards development
• Risk assessment methodologies and risk language