About this role
Salary: £? - ? per year
Requirements
- Strong background in cyber security assurance, technology risk, IT audit, security testing, or cyber risk management.
- Experience leading assurance reviews in large, complex enterprise environments.
- Deep understanding of second-line assurance and control effectiveness assessment.
- Experience assessing technical controls across cloud, infrastructure, identity, networks, and applications.
- Strong working knowledge of frameworks such as ISO 27001, NIST Cybersecurity Framework, NIST 800-53, CIS Controls, and MITRE ATT&CK.
- Experience producing board-level reporting and translating technical findings into business risk.
- Excellent stakeholder management skills, including the ability to challenge constructively and influence senior leaders.
- Desirable: experience with Continuous Controls Monitoring (CCM) platforms, automated assurance and evidence collection, PowerShell, Python or API-based automation, cloud security assurance, and modern identity controls.
- Desirable certifications include CISSP, CISM, CISA, CRISC, CCSP, or ISO 27001 Lead Auditor.
Responsibilities
- Lead delivery of a large-scale cyber technical assurance programme.
- Manage and mentor a team of Technical Assurance Analysts.
- Conduct independent second-line assessments of cyber security controls and their effectiveness.
- Review technical evidence, validate findings, and assess control design and operating effectiveness.
- Oversee control testing across cloud, infrastructure, networks, applications, and identity environments.
- Drive continuous controls monitoring, automated assurance, and data-driven reporting capabilities.
- Track remediation activities and ensure significant findings are appropriately managed and escalated.
- Develop executive-level reporting, dashboards, and cyber risk metrics.
- Partner with Cyber Security, Internal Audit, Risk, Compliance, Legal, and Technology teams to improve security outcomes.
- Act as a subject matter expert on cyber assurance, risk, and control effectiveness.
Technologies
- API
- Cloud
- PowerShell
- Python
- Security
More
We are supporting a large international enterprise seeking an experienced Cyber Security Assurance Manager to lead a cyber assurance and control effectiveness programme across a complex global environment. This is a senior second-line position combining technical expertise, assurance methodology, stakeholder engagement, and leadership. The role provides independent oversight of controls across infrastructure, cloud, identity, applications, vulnerability management, data security, and incident response, with engagement across senior business and technology leaders. The contract is for six months, based in London with one day per week onsite and flexibility; the day rate is competitive and the start is ASAP. We are acting as an employment business in relation to this vacancy.
last updated 43 week of 2026