Senior Manager, Information Security Risk

Responsibilities

• Lead and manage a team, including the Security Risk Manager and third-party security vendors.
• Drive a culture of cyber security awareness across IT and the wider business through executive risk reporting.
• Quantify, document, and track cybersecurity risks via a central risk register and periodic deep-dive assessments.
• Oversee third-party risk assessments, including vendor security control evaluations and audit report reviews.
• Manage cybersecurity obligations within legal agreements to ensure appropriate protection for the company.
• Act as custodian for the IT Policy and Standard suite, managing the update and review cycle.
• Collaborate closely with the Group Risk team to align reporting with global methodologies.

Requirements

• Proven leadership experience with a track record of mentoring and developing teams.
• Extensive experience operating at a senior level within Information Security and Risk management.
• Strong stakeholder management skills with the ability to influence at the Executive Committee level.
• Ability to manage conflicting priorities and multiple complex tasks in a global environment.
• Professional certification such as CISSP, ISO27001 Lead Auditor/Implementor, or CRISC.

About the Company

Burberry is a global luxury brand that believes creativity opens spaces. Since its founding in 1856, Burberry has aimed to unlock the power of imagination to push boundaries and open new possibilities for people, customers, and communities. We are a purposeful, values-driven brand committed to creating the next generation of sustainable luxury.