Security Risk Management Specialist, Auckland

In security risk management, we aim to harness industry best practices combined with innovative approaches to security risk assessments and modeling. Our security risk management team is responsible for defining strategies and practices to identify, track, and mitigate security risks across all operations.To support this, we utilize industry standards and emerging threat intelligence to facilitate risk identification, quantification, impact analysis, and modeling, ultimately guiding decision-making. In this role, you will help establish and execute a broad strategic vision for Canonical's security risk program. You will collaborate within the team and across various departments to enhance product security, resilience, and robustness for Ubuntu users. Additionally, you will work with our Learning and Development team to develop playbooks and facilitate security training.The team's mission extends beyond Canonical to contribute to the wider open source ecosystem by sharing knowledge at industry events, providing threat intelligence, and representing Canonical in sector-specific governance bodies. What you will do in this role: Define Canonical's security risk management standards and playbooksAnalyze and improve security risk practices Evaluate, select, and implement new security tools and requirements Enhance the presence and thought leadership of Canonical's security risk management Develop security risk learning and development materials Collaborate with security leadership to present information and influence changeContribute to developing key risk indicators and performance metrics Apply statistical models to risk frameworks (e.g., FAIR, sensitivity analysis) Participate in risk management discussions and decision-making Lead quantified risk assessments and incorporate qualitative data for process improvementsInterpret cybersecurity risk analyses in business terms and recommend actions Create templates and materials to facilitate self-service risk management Identify opportunities to improve risk management processes Initiate security assessment campaigns and mitigation efforts Develop evaluation methods and performance indicators for security functionsWhat we are looking for: Exceptional academic record Undergraduate degree in Computer Science, STEM, or equivalent experience Drive and a proven track record of exceeding expectations Motivation to lead in technology security Leadership and management skills Excellent communication and presentation skills in EnglishStrong problem-solving skills and technical understanding of security assessments Expertise in threat modeling and risk management frameworks Knowledge of operational security risk management Experience with Secure Development Lifecycle and Security by Design methodologies What we offer you: We offer competitive compensation based on location, experience, and performance, with annual reviews and performance bonuses. Our benefits reflect our values and include:Distributed work environment with biannual in-person team sprints USD 2,000 annual learning and development budget Recognition rewards and annual holiday leave Maternity and paternity leave Employee Assistance Programme Opportunities for travel and meeting colleagues Travel upgrades for company eventsAbout Canonical Canonical is a leading open source technology company, publisher of Ubuntu, and a pioneer in AI, IoT, and cloud platforms. Since 2004, we've operated as a remote-first company, fostering innovation and excellence. We are committed to diversity and equal opportunity, welcoming applications from all backgrounds to contribute to our mission of changing the world through open source.#J-18808-Ljbffr