Job Overview
At Arm, enterprise security risk management requires an understanding of diverse technologies, evolving threats and their potential impact on our business. Our Enterprise Security team works with engineering and technology teams to assess security risks and provide the insights needed to support informed business decisions.
We're looking for a Senior Technical Security Risk Specialist to join our team in Bangalore!
You'll lead security risk activities across Arm's global operations, using your technical knowledge and experience to help teams navigate difficult decisions and find practical solutions.
The work is varied, covering cloud infrastructure, engineering environments, physical security and third-party relationships. You'll collaborate with specialists across Arm, bringing technical expertise and fresh thinking to problems that don't always have straightforward answers.
AI is changing how cyber threats emerge and how we defend against them. At Arm, we're putting AI and automation to work across Enterprise Security, creating exciting opportunities to develop innovative solutions that keep pace with evolving threats and the growing use of AI.
Responsibilities
- Lead security risk assessments across technology, infrastructure, physical environments and third-party services, evaluating threats, control weaknesses and potential business impacts.
- Take responsibility for assessing security risks, issues and exceptions, recommending appropriate treatment options and working with teams to address identified weaknesses.
- Lead third-party security assessments, examining supplier security practices, technical controls and supporting evidence to identify and reduce risks to Arm.
- Guide engineering, technology and business teams on security risks, helping resolve difficult questions and evaluate proposed solutions.
- Develop and improve risk assessment methods, remediation plans, reporting and workflows, including opportunities to use AI and automation. Maintain risk information in ServiceNow IRM.
Essential Skills and Experience
You'll have deep expertise in cybersecurity and practical experience leading security risk assessments, handling exceptions and evaluating technical controls.
You'll understand enterprise technologies such as AWS, Microsoft Azure, networks, identity management, endpoint security, applications and on-premises infrastructure. We don't expect expertise in every area, but you'll need the technical depth to assess unfamiliar solutions and identify where further investigation is needed.
Knowledge of physical security risks is also important, including access controls and the protection of facilities and critical assets.
You'll have experience applying recognised security frameworks, such as NIST CSF, NIST SP 800-53 or ISO 27001, and using GRC platforms such as ServiceNow IRM to manage risks, issues and remediation.
You'll be able to work independently, question technical assumptions and explain security risks clearly to people with different levels of technical knowledge.
Nice to Have Skills and Experience
- Certifications such as CISSP, CCSP, CRISC or CISM.
- Experience assessing security risks in data centres, laboratories or other secure facilities.
- Experience improving governance, risk and assurance processes through AI, automation or scripting.
Why Work With Us?
Arm's technology powers billions of devices worldwide. Protecting the systems, information and people behind that technology brings a wide range of security challenges.
You'll have the freedom to explore different technologies, work with specialists around the world and see how your recommendations shape security decisions.
We support professional development, encourage new ideas and value different ways of thinking. We also welcome applications from people with different backgrounds and provide reasonable adjustments throughout our recruitment process.
#LI-DA1