Cyber Assurance Team Lead

The Cyber Assurance Team Lead operates within a complex, safety-critical, and highly regulated environment where cyber resilience is essential to operational integrity and regulatory compliance. The role is subject to intense scrutiny from internal governance bodies and external regulators, requiring a defensible and transparent assurance posture. Operating within a highly regulated and safety-critical environment, the postholder supports the Head of GRCA and the wider cyber security function by providing meaningful insight into the organisations cyber resilience and driving continuous improvement.

The Team Lead works closely with risk and compliance leads, ICT delivery teams, and internal/external audit functions to ensure assurance is embedded, risk-informed, and proportionate. The role also supports regulatory engagement and contributes to maintaining confidence in the clients cyber security posture. What youll do:
Lead the development and execution of a risk-based cyber assurance strategy and annual plan, ensuring alignment with organisational objectives and regulatory expectations. Oversee the delivery of second-line assurance activities, including control effectiveness testing, process evaluations, and thematic reviews across IT, OT, technical architecture, and supply chain domains. Coordinate with first-line ICT, engineering, and supply chain teams, as well as third-line audit, to ensure assurance coverage is integrated, efficient, and comprehensive.

Support the Head of GRCA in managing regulatory engagement, including preparation for inspections, audits, and the provision of defensible assurance evidence. Direct line management of senior analysts (principal advisors), with indirect oversight of assurance professionals Define assurance scope, resource allocation, and report findings to governance forums. What were looking for:
Strong experience in cyber assurance, risk management, audit, or control testing within a regulated environment. Proven experience building or scaling assurance functions in complex technical environments spanning IT/OT, and supply chain domains. Experience managing managers in technical functions, including performance management, capability development, and resource planning. In-depth understanding of cyber security frameworks (e.g., NCSC CAF, ISO 27001, NIST CSF). Experience designing and delivering assurance programmes and reporting to senior stakeholders.

Ability to assess technical and procedural controls and communicate findings clearly.