Technical Security Assurance Lead

Entasis Partners are exclusively supporting a leading global Financial Services organisation in the search for a Security Assurance Specialist to join a highly experienced Security Assurance function.

The team provides independent, pragmatic insight into the effectiveness of the organisation's security capabilities, working across technology, engineering and cyber security to identify risks, challenge assumptions and improve security outcomes.

The role offers broad exposure across a complex and rapidly evolving technology environment, working with technical teams, senior technology leaders and Executive stakeholders.

• Scoping and delivering security reviews across technology and cyber security.
• Assessing security capabilities and controls against recognised good practice and relevant frameworks.
• Identifying risks, weaknesses and opportunities for improvement.
• Working with engineering, technology and security teams to understand complex environments and how security operates in practice.
• Applying analytical and investigative techniques to assess security effectiveness.
• Producing clear, evidence-based reports and communicating findings to senior stakeholders.
• Providing constructive and independent challenge across the organisation.
• Supporting the development of Security Assurance through automation, data analytics and emerging AI capabilities.

• Cloud and cloud security
• Kubernetes and containerised environments
• Dev Ops and CI/CD
• Terraform and Infrastructure as Code
• Jenkins and modern engineering tooling
• Security engineering and architecture
• Identity and access management
• Infrastructure and network security
• Application and platform security
• Vulnerability management and security testing

You do not need to be an expert across every area, but should have strong technical foundations, genuine curiosity and the ability to quickly understand complex and unfamiliar environments.

The ideal candidate will have 7+ years' experience across information security, cyber security, security engineering, architecture, assurance or technology risk, with experience assessing security capabilities, controls and technology environments, a strong understanding of security risk management and control principles, strong analytical and investigative skills, excellent written and verbal communication skills, confidence engaging with technical teams and senior stakeholders, a curious mindset with the ability to challenge assumptions constructively, and the ability to quickly assess complex and unfamiliar environments;

familiarity with frameworks such as ISO 27001, CIS and NIST would be advantageous.

This is an excellent opportunity for a technically credible cyber security professional to join a high-profile Security Assurance function, with genuine influence across a global Financial Services organisation.