Risk Mitigation Specialist, GSRA, EMEA

From keeping Googlers safe and secure to managing disruptive incidents and crises, the ability to anticipate, deter, detect, and act are the pillars of Google’s Global Security and Resilience Services (GSRS) team. As a member of GSRS, you will help develop a culture where safety, security and resiliency are integrated into every facet of Google, including the creative process. You will help us continually identify, evaluate and monitor enterprise risks that could affect business activities and provide business leaders the information they need to make critical decisions. You will collaborate with cross-functional teams to create innovative strategies and develop industry leading programs that drive sustainable effectiveness.

As a part of the Global Security Risk Assessment (GSRA) team, you will be dedicated to safeguarding people, company facilities, critical assets/ infrastructure, and intellectual property against evolving real-world threats. In this role, rather than relying solely on routine audits, our team takes an intelligence-driven, proactive approach to physical security. You will combine simulated offensive testing, evaluating how well a facility holds up against realistic and evolving tactics with comprehensive on-site inspections of physical access, alarms, guard operations, architectural design and discreet programmes.
In this role, you will lead and facilitate end-to-end physical security risk assessments across global and regional sites. You will collaborate closely with analysts to identify plausible threats, partner with physical testing teams to uncover site vulnerabilities, and work alongside local facility and security managers to evaluate controls. You will identify gaps, translate complex technical findings into clear risk insights for leadership, facilitate stakeholder workshops to develop practical mitigation strategies, and help integrate lessons learned into overarching global security standards and building guidelines.

Minimum qualifications:

• Bachelor's Degree in Security Risk Management and or equivalent practical experience.
• 10 years of experience designing and implementing security resilience programs with multiple risk stakeholders in a regional and global capacity.
• 5 years of experience in programme management, including developing risk management solutions and partnering with technical and non-technical stakeholders at all levels across an organization.
• Experience in cross-functional partnership and multi-disciplinary project management.

Preferred qualifications:

• Experience in security consulting, law enforcement, security services or military in a regional context.
• Work experience or knowledge with regional/global security operations at Google, as well as familiarity with the respective international operating environment.
• Ability to take initiative, high levels of self motivation and be able to work well separately and as part of a wider team.
• Ability to be able to influence multiple stakeholders with Subject Matter Expert (SME) application and experience.
• Excellent attention-to-detail and proficiency in risk management tools, concepts and methodologies.
• Excellent communication, stakeholder relationship building and problem-solving skills.

Responsibilities:

• Coordinate with wider GSRS teams to plan and execute Physical Security Risk Assessments, collaborating with the physical Red Team or wider Red Teams, as these teams will produce the vulnerability assessments as part of the GSRS risk methodology.
• Conduct and Lead on Threat based Global/Regional Physical Security Risk Assessments on behalf of GSRS, supporting and facilitating the production of threat led Security Risk Assessments.
• Communicate complex risk information and compliance requirements in a clear and concise manner to both technical and non technical risk stakeholders, leading the facilitation of risk workshops.
• Partner with Risk category owners on the development of suggested risk treatment strategies and regional remediation teams to monitor the effectiveness of deployed controls.
• Contribute to the development and enhancement of Physical Risk management policies, procedures and Operational Security Standards to meet regulations.