Security Risk Management Specialist
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
TL;DR
Security Risk Management Specialist (Cybersecurity): Define and improve security risk management standards, perform risk assessments and modelling, and develop security risk learning materials with an accent on threat modelling, risk quantification, and security strategy. Focus on leading quantified risk assessments, applying statistical models to risk frameworks, and influencing security practices across a global open source company.
Location: Home based - Worldwide
Company
is a pioneering tech firm at the forefront of open source, publishing Ubuntu and enabling AI, IoT, and cloud platforms with a remote-first culture since 2004.
What you will do
- Define and improve 's security risk management standards and playbooks
- Evaluate and implement new security requirements, tools, and practices
- Lead quantified risk assessments and apply statistical models to risk frameworks
- Develop security risk learning and development materials
- Collaborate cross-functionally and influence security leadership
- Monitor and improve effectiveness of risk management processes
Requirements
- Excellent business English writing and presentation skills
- Undergraduate degree in Computer Science or STEM, or equivalent experience
- Deep technical understanding of security assessments and risk management
- Expertise in threat modelling and risk management frameworks
- Experience in Secure Development Lifecycle and Security by Design methodology
- Leadership and management ability
Culture & Benefits
- Distributed work environment with twice-yearly in-person team sprints
- Personal learning and development budget of USD 2,000 per year
- Annual compensation review and performance-driven bonus
- Annual holiday leave and parental leave
- Employee Assistance Programme and travel opportunities
- Priority Pass and travel upgrades for long haul company events
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →