Security Risk Lead; FTC

Security Risk Lead – Manchester, England, UK

Our Security Risk Policies and Controls team, part of the global Security function, is committed to helping Dentsu understand and effectively manage cyber security risks.

As a Security Risk Lead, you will play a key role in assessing and reporting cyber security risk globally, enabling informed decision‑making and oversight of risk reduction initiatives. You will report directly to the Head of Technology & Security Risk.

• Conduct regular cyber security risk assessments leveraging data and insights from global and regional stakeholders, using the defined security risk management framework and processes.
• Support the development of security metrics via reporting dashboards for global and regional stakeholders.
• Produce insightful and high‑quality management information for monthly security risk reporting and other governance and risk forums, highlighting key issues, risk indicators and remediation progress.
• Manage day‑to‑day operational security risk tasks such as issue and policy exception requests.
• Contribute to the ongoing development of the Security GRC platform, focusing on streamlining risk and issue management processes.
• Continuously improve risk assessment methodologies to enhance accuracy, efficiency and relevance.
• Build strong partnerships with Regional and Practice Area Security teams, providing expert guidance on risk and issue management best practices.

• 4–5 years of experience in cyber/information security within a global organisation.
• Achieved or working towards an information security qualification (CISSP, CISM, CISA, CRISC) – desirable.
• Strong working knowledge of ISO 27001.
• Experience with security compliance initiatives within an enterprise technology environment such as NIST CSF, CSA, PCI DSS, Cyber Essentials, OWASP Top 10.
• Understanding of security risk analysis techniques.
• Proven ability to prepare and present risk reporting to senior audiences with precision and clarity.
• Strong communication and stakeholder engagement skills with confidence in discussing risk topics.
• Hands‑on experience with Service Now IRM capability – strong advantage.
• Understanding of network architecture protocols and principles – desirable.
• Ability to explain technical complex concepts to non‑technical audiences combined with excellent communication and organisational skills.
• Knowledge of all domains within security covering people, process and technology.
• Technical experience using Microsoft Power BI, Service Now and other GRC/security platforms – advantageous.
• Demonstrably self‑motivated, pro‑active and action‑oriented to achieve deadlines.
• Interest in personal development within security risk.
• Proactive development of trending knowledge and skills within the information security community.

At Dentsu we embrace diversity and inclusion, valuing the unique perspectives and contributions of every individual. We believe that diversity fuels creativity and innovation, benefiting our employees, partners and communities.

We welcome applications from all individuals regardless of race, ethnicity, nationality, religion, gender, gender identity, sexual orientation, age, disability, marital status or any other protected characteristic. Beyond recruitment we strive to create an environment where everyone feels respected, supported and empowered to bring their authentic selves to work.

We recognise the importance of work‑life balance and are open to discussing flexible working arrangements for all roles. If you need reasonable adjustments due to a disability or medical condition during our recruitment process, please contact us quoting the reference number of the role you are applying for. Your needs will be handled with respect and confidentiality to ensure an inclusive and accessible experience.

Manchester – Bonded Warehouse

Fixed‑Term Contract (up to 12 months, 6‑month core term with potential extension)