Senior Manager – Cyber Security Risk

About the Role The Senior Manager – Cyber Security Risk has a global remit within Burberry's Cyber Security team. The role ensures security risk informs the Cyber Security strategy, influences investment through the Security Improvement Programme and wider IT Portfolio, and maintains risk services such as vendor due diligence, contract reviews and the maintenance of policies and standards.

What You'll Do

• Lead and manage a team, overseeing activities of the Security Risk Manager and third-party security vendors, and play a key part in the procurement process.
• Drive a culture of understanding and awareness around Cyber Security risks across IT and the business, delivering executive risk reporting to Executive Committee level stakeholders.
• Quantify, document and track Cybersecurity risks, including oversight of a central risk register and periodic risk deep-dives in collaboration with the Group Risk Team.
• Oversee the process to assess third-party risk from interactions with Vendors and Suppliers, including assessment of vendor security controls via questionnaires and audit reports.
• Oversee cybersecurity obligations in legal agreements with Third-Party IT Vendors and Suppliers to ensure appropriate protection for Burberry.
• Custodian of the Burberry IT Policy and Standard suite, managing updates and the review cycle.
• Collaborate with Group Risk to align cyber risk reporting with Group Risk methodologies and processes.

What We're Looking For

• Strong stakeholder management.
• Proven leader with experience mentoring and developing teams.
• Prior experience operating at a senior level within Information Security and Risk.
• Ability to manage conflicting priorities and multiple tasks.
• Professional qualifications in Information Security and Risk, such as CISSP, ISO27001 Lead Auditor/Implementor, or CRISC.