Security Risk Management Specialist - Canonical

About the Role

In security risk management, we harness industry best practices combined with innovation to drive security risk assessments and modelling. Our team is the primary owner of the strategy and practices used to identify, track, and reduce security risk across the organization.

In this role, you will establish and execute a strategic vision for the security risk program at Canonical. You will work cross-functionally to contribute ideas for product security, improving the resilience of Ubuntu users, and collaborate with our Learning and Development team to facilitate security training.

What You Will Do

• Define Canonical's security risk management standards and playbooks.
• Analyze and improve security risk practices.
• Evaluate, select, and implement new security requirements, tools, and practices.
• Grow the presence and thought leadership of Canonical's security risk management practice.
• Develop security learning and development materials.
• Work with Security leadership to present information and influence change.
• Participate in developing key risk, control, and performance indicators.
• Apply statistical models to risk frameworks (e.g., FAIR, sensitivity analysis).
• Lead quantified risk assessments and interpret cyber security risk analyses in business terms.
• Launch campaigns to perform security assessments and mitigate risks company-wide.

What We Are Looking For

• Exceptional academic track record (Undergraduate degree in Computer Science/STEM or equivalent experience).
• Drive and a track record of going above-and-beyond expectations.
• Deep personal motivation to be at the forefront of technology security.
• Leadership and management ability.
• Excellent business English writing and presentation skills.
• Expertise in threat modelling and risk management frameworks.
• Broad knowledge of operationalizing security risk management.
• Experience in Secure Development Lifecycle and Security by Design methodology.

What We Offer

• Distributed work environment with twice-yearly in-person team sprints.
• Personal learning and development budget of USD 2,000 per year.
• Annual compensation review and performance-driven annual bonus.
• Recognition rewards, holiday leave, and maternity/paternity leave.
• Employee Assistance Programme.
• Travel opportunities for company events with priority pass and upgrades.

About Canonical

Canonical is a pioneering tech firm and the publisher of Ubuntu. We recruit globally and set a high standard for excellence. As a remote-first company since 2004, we challenge our team to think differently and work smarter.