Remote opportunity at
CanonicalSecurity Risk Management Specialist
Canonical, the publisher of Ubuntu and a pioneer in open-source technology, is seeking a Security Risk Management Specialist to join its remote team. This position takes…
Career Tools
About This Role
Canonical, the publisher of Ubuntu and a pioneer in open-source technology, is seeking a Security Risk Management Specialist to join its remote team. This position takes ownership of the strategy and methods used to identify, track, and mitigate security risks across the enterprise, while also contributing to the security of the wider open-source ecosystem. The person in this role will establish and execute a broad strategic vision for the security…
Job Description
Canonical, the publisher of Ubuntu and a pioneer in open-source technology, is seeking a Security Risk Management Specialist to join its remote team. This position takes ownership of the strategy and methods used to identify, track, and mitigate security risks across the enterprise, while also contributing to the security of the wider open-source ecosystem.
The person in this role will establish and execute a broad strategic vision for the security risk program by working both within the team and cross-functionally across the organization. Responsibilities include defining security risk standards and playbooks, implementing new security tools, applying statistical models to risk frameworks, and leading quantified risk assessments. The role also involves collaborating with the Organizational Learning and Development team to create learning materials, presenting information to leadership to influence change, and representing Canonical in sector-specific governance bodies or industry events.
Ideal candidates possess a strong background in technology security, excellent communication skills in business English, and deep technical knowledge of risk management frameworks and threat modeling. Canonical operates as a remote-first organization, offering a distributed work environment complemented by regular in-person team sprints, annual compensation reviews, performance-driven bonuses, a personal learning and development budget, and comprehensive leave benefits.
Responsibilities
- Define the company security risk management standards and playbooks
- Analyze and improve existing security risk practices
- Evaluate, select, and implement new security requirements, tools, and practices
- Develop learning and development materials for security risk
- Collaborate with security leadership to present information and influence organizational change
- Develop key risk indicators, key control indicators, and key performance indicators
- Apply statistical models to risk frameworks such as FAIR and sensitivity analysis
- Lead quantified risk assessments and leverage qualitative data for engineering process improvements
- Interpret internal and external cyber security risk analyses in business terms
- Create templates and materials to facilitate self-service risk management actions
- Launch company-wide campaigns to perform security assessments and mitigate risks
- Build evaluation methods and performance indicators to measure the efficiency of security capabilities
Requirements
- Drive and a track record of going above-and-beyond expectations
- Personal motivation to be at the forefront of technology security
- Leadership and management ability
- Excellent business English writing and presentation skills
- Strong problem-solving and communication skills
- Deep technical understanding of security assessments and risk management
- Expertise in threat modelling and risk management frameworks
- Broad knowledge of operationalizing the management of security risk
- Experience in Secure Development Lifecycle and Security by Design methodology
Qualifications
- Exceptional academic track record
- Undergraduate degree in Computer Science or a STEM field, or a compelling narrative about an alternative path
Core Skills
Benefits
- Performance-driven annual bonus
- Annual compensation reviews
- Distributed work environment with twice-yearly in-person team sprints
- Personal learning and development budget of USD 2,000 per year
- Recognition rewards
- Annual holiday leave
- Maternity and paternity leave
- Employee Assistance Programme
- Travel opportunities to meet colleagues
- Priority Pass and travel upgrades for long-haul company events
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Is this a remote position?
Yes, Canonical has operated as a remote-first company since its inception in 2004.
What is the employment type?
The posting specifies full-time employment.
What salary does this position offer?
The posting does not specify a salary figure, though compensation worldwide accounts for geographical location, experience, and performance, alongside a performance-driven annual bonus.
What educational background is required?
Candidates need either an undergraduate degree in Computer Science or a STEM field with an exceptional academic track record, or a compelling narrative about an alternative path.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.