Specialty
The role
Canonical's security risk management team owns how the company identifies, tracks and reduces security risk. This specialist role sets standards, runs quantified risk assessments and works across teams. It is a remote position at Canonical, the publisher of Ubuntu.
What you will do
- Define security risk management standards and playbooks
- Lead quantified risk assessments and apply statistical models such as FAIR and sensitivity analysis
- Develop key risk, control and performance indicators for security programs
- Evaluate and implement new security requirements, tools and practices
- Create templates and learning materials for self-service risk management
- Present findings to security leadership and run campaigns to assess and reduce risk
What they ask for
- Expertise in threat modelling and risk management frameworks
- Deep technical understanding of security assessments and risk management
- Experience with Secure Development Lifecycle and Security by Design
- Leadership and management ability
- Excellent business English writing and presentation skills
- Undergraduate degree in Computer Science or another STEM subject, or a strong case for an alternative path
What they offer
- Fully distributed work, with in-person team sprints or company events
- Personal learning and development budget of USD 2,000 per year
- Annual compensation review and a performance-driven annual bonus
- Recognition rewards
- Annual holiday leave plus maternity and paternity leave
- Employee assistance programme
This is our own short reading of the posting. The full description, and anything that has changed since, is on Canonical's careers page behind the apply button.
