Security Supply Chain and Risk Analyst

Thales
United Kingdom
Workplace: HybridFull timeFunction: Supply Chain & LogisticsSkills: ["Communication","Engagement","Analytical skills","Written communication","Problem solving","Analytical thinking"]

Support Thales UK in identifying, assessing, and managing security risks across the supply chain and corporate security function. Maintain risk profiles and reporting, flow down and manage Defstan 05-138 V4 requirements with suppliers, and assist with Group Cyber Questionnaire and Cyber Essentials activities. Help investigate supplier security incidents, support ISMS maintenance, drive security risk policies and training, and contribute to security accreditations and risk-maturity improvements.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Thales
Thales
1 month ago

Security Supply Chain and Risk Analyst

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 5 hours agoStatus: Live

Job Summary

Support Thales UK in identifying, assessing, and managing security risks across the supply chain and corporate security function. Maintain risk profiles and reporting, flow down and manage Defstan 05-138 V4 requirements with suppliers, and assist with Group Cyber Questionnaire and Cyber Essentials activities. Help investigate supplier security incidents, support ISMS maintenance, drive security risk policies and training, and contribute to security accreditations and risk-maturity improvements.
Location: United Kingdom
Workplace: Hybrid
Employment Type: Full time
Job Function: Supply Chain & Logistics
Seniority: Mid level

Key Responsibilities

  • •Support the Supply Chain and GRC function and the wider Corporate Security Office in delivering Thales UK security strategy and roadmap.
  • •Analyse technical, physical, environmental, and personnel security risks; advise stakeholders on risk assessments and controls.
  • •Analyse supplier security incidents and support the Security Incident Team and relevant stakeholders.
  • •Support Procurement and suppliers to flow down and manage Defstan 05-138 V4 requirements and Thales UK/Group supplier security requirements.
  • •Maintain and improve security risk management processes, documentation, ISMS activities, and security accreditations; produce monthly KRIs/KPIs and reporting.

Pay and Benefits

Equity and Bonus:Equity
Perks:Health InsuranceAnnual BonusPaid Volunteering

Key Requirements

  • •Experience in a Risk Management role.
  • •Experience monitoring compliance with security accreditations/standards such as ISO 31000, ISO 27005, and ISO 27001 (or similar).
  • •Good communication and engagement skills to clearly articulate ideas, risks, and problems.
  • •Strong analytical skills to produce useful metrics and reporting.
  • •Qualifications such as CRISC or CSRM beneficial (not essential).
Skills:CommunicationEngagementAnalytical skillsWritten communicationProblem solvingAnalytical thinking
Certifications:CRISCCSRM
Tech Stack:Defstan 05-138 V4Group Cyber QuestionnaireCyber EssentialsISMSISO 31000ISO 27005ISO 27001FSCNISTKRIsKPIsDashboards

Company Brief

Thales
Designs and delivers advanced systems and services for aerospace, defence, security, and digital identity and cybersecurity markets, serving government and commercial customers worldwide.
Industry: Defense Technology
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: Paris, France
Founded: 2000
WebsiteLinkedIn