Burberry Senior Manager, Information Security Risk

Burberry, a storied name in luxury fashion, is renowned for its commitment to creativity and innovation. As part of a global conglomerate, Burberry offers a dynamic environment where diverse talents are nurtured, and sustainable luxury is championed. The brand is dedicated to driving industry change and fostering community engagement, making it an inspiring place for professionals seeking to make a meaningful impact.

1. Lead and manage a team, overseeing the activities of the Security Risk Manager and third-party security vendors, and play a key role in the procurement process.
2. Drive a culture of understanding and awareness around Cyber Security risks across IT and business sectors, leveraging executive risk reporting to engage Executive Committee level stakeholders.
3. Quantify, document, and track Cybersecurity risks, overseeing a central risk register and conducting periodic Cyber Risk assessment deep-dives in collaboration with the Group Risk Team.
4. Oversee the assessment of third-party risk incurred through interactions with vendors and suppliers, utilizing questionnaires and audit reports to evaluate security controls.
5. Manage the assessment of cybersecurity obligations in legal agreements with Third-Party IT Vendors and Suppliers, ensuring adequate protection for Burberry.
6. Act as custodian of the Burberry IT Policy and Standard suite, managing the update and review cycle.
7. Collaborate closely with Group Risk to ensure Cyber risk reporting aligns with Group Risk methodologies and processes.

1. Professional qualification in Information Security and Risk, such as Certified Information Systems Security Professional (CISSP), ISO27001 Lead Auditor/Implementor, or Certified in Risk and Information Systems Control (CRISC).

1. Strong stakeholder management skills
2. Proven leadership with experience in mentoring and developing teams
3. Experience operating at a senior level within Information Security and Risk
4. Ability to manage conflicting priorities and multiple tasks

Previous experience in a senior-level position within Information Security and Risk is required.

Burberry provides an inclusive and supportive work environment, fostering professional growth and offering opportunities to contribute to industry-leading initiatives.

Burberry's workplace culture is driven by creativity and purpose, encouraging a diverse range of skills and experiences to thrive. The brand is committed to being a force for good, promoting sustainable luxury and community engagement.