Security Risk Manager

How You’ll Support Our Mission  

As a Security Risk Manager, you will oversee ESO’s risk management framework to ensure that security threats are properly evaluated, tracked, and minimized to the extent possible. Our customers, regulators and stakeholders depend on our ability to protect customer data, so we need to be able to demonstrate our security posture at all times.  ESO’s software is in demand globally by firefighters, paramedics, hospitals, and governments. To meet this demand, we are improving our vulnerability assessment processes to protect our customers and data from a variety of fast-moving and constantly evolving threats.  

In this capacity, you will report to the Director of Security Compliance within our Security and IT Team. You will play an integral role in the transformation of the Security Compliance function working across all products, systems, and technologies. 

Our security team members have a high degree of autonomy and are part of a high functioning, motivated and forward-thinking team. You have the chance to join a growing and passionate team, working on critical products, whilst being supported with training opportunities and mentoring. 

What You’ll Be Doing – the day-to-day:  

• Developing, implementing and maintaining a cyber risk management and control framework. 

• Conducting risk assessments to understand, quantify and articulate the inherent and residual risk positions against a risk appetite position. 

• Overseeing and reporting on the risk remediation plans required to enhance controls. 

• Ensuring our risk function is compliant with NIST SP800-53 and SOC 2 obligations. 

• Educating ESO colleagues on how to measure and document control effectiveness. 

• Working with a range of teams to test control function adequacy and compliance. 

• Defining and implementing appropriate reporting metrics to demonstrate risk management. 

• Be in the detail, working shoulder-to-shoulder with our technology teams. 

Who You Are - some of the essential things required to be successful in the role: 

• 5+ years’ experience in technology security management, risk management, IT operations, and/or technology-related consulting. 

• Experience conducting security risk assessments. 

• Good analytical skills and ability to evaluate the likelihood and impact of identified risks. 

• Great communication skills to be able to communicate with technical and non-technical stakeholders. 

• Proven ability to coordinate and influence large groups, including strong planning & project management skills. 

• Understanding of Microsoft Azure. 

• You should also have a passion for what you do and understand how your work impacts ESO’s success. 

Who You Are – it’s desirable if you have any of the following 

• Experience working with governance, risk, and compliance (GRC) tools and/or platforms such as LogicGate.  

• Security qualifications (CISSP, CRISC, CISM, CISA). 

• Detailed knowledge of the NIST 800-53 security and privacy controls. 

• Experience working with the Atlassian product suite (Jira and Confluence) for collaboration.