Cyber Security Assurance Manager

Cyber Security Assurance Manager

Contract:

6 Months

Location:

London (1 day per week onsite / flexible)
Day Rate:
Competitive
Start: ASAP

We're supporting a large, international enterprise in the search for an experienced Cyber Security Assurance Manager to lead a cyber assurance and control effectiveness programme across a complex global environment.

This is a senior second-line cyber security position, responsible for independently assessing the effectiveness of security controls, driving assurance activity, overseeing technical reviews, and providing risk-based insight to senior stakeholders. The successful contractor will lead a small team while acting as a trusted adviser across cyber security, technology, audit and risk functions.

The Opportunity

You will own the planning and delivery of a risk-based technical assurance programme, providing independent oversight of security controls across infrastructure, cloud, identity, applications, vulnerability management, data security and incident response capabilities.

The role combines technical cyber security expertise, assurance methodology, stakeholder engagement and leadership. You'll engage with senior business and technology leaders, deliver actionable reporting, challenge control weaknesses, and drive continuous improvement across the control environment.

Key Responsibilities

Lead the delivery of a large-scale cyber technical assurance programme.
Manage and mentor a team of Technical Assurance Analysts.
Conduct independent second-line assessments of cyber security controls and control effectiveness.
Review technical evidence, validate findings and assess both design and operating effectiveness of controls.
Oversee control testing activities across cloud, infrastructure, networks, applications and identity environments.
Drive continuous controls monitoring, automated assurance and data-driven reporting capabilities.
Track remediation activities and ensure significant findings are appropriately managed and escalated.
Develop executive-level reporting, dashboards and cyber risk metrics.
Partner with Cyber Security, Internal Audit, Risk, Compliance, Legal and Technology teams to improve security outcomes.
Act as a subject matter expert on cyber assurance, risk and control effectiveness.

Required Experience

Strong background in Cyber Security Assurance, Technology Risk, IT Audit, Security Testing or Cyber Risk Management.
Experience leading assurance reviews within large, complex enterprise environments.
Deep understanding of second-line assurance and control effectiveness assessment.
Experience assessing technical controls across cloud, infrastructure, identity, networks and applications.
Strong working knowledge of frameworks such as:
ISO 27001
NIST Cybersecurity Framework
NIST 800-53
CIS Controls
MITRE ATT&CK
Experience producing board-level reporting and translating technical findings into business risk.
Excellent stakeholder management skills, with the ability to challenge constructively and influence senior leaders.

Desirable Experience

Continuous Controls Monitoring (CCM) platforms.
Automated assurance and evidence collection.
Power Shell, Python or API-based automation.
Cloud security assurance and modern identity controls.
CISSP, CISM, CISA, CRISC, CCSP or ISO 27001 Lead Auditor certifications.

GCS is acting as an Employment Business in relation to this vacancy