Chartered Cyber Audit Lead

InfoSec People Ltd; Cheltenham; Hybrid; GBP 90,000 - 130,000; Full time

Job summary

InfoSec People Ltd. is seeking a senior cyber audit specialist to lead external cyber security audit, assurance and certification engagements across the full audit lifecycle. The role demands technical authority and a consultative style to shape assurance quality across critical environments.

You will lead engagements, assess controls, and present findings to executives, with opportunities to mentor peers. This is a senior opportunity in a flexible hybrid role, offering a strong salary package

Qualifications

• Significant cyber security audit and assurance experience, ideally in defence, government, regulated or high-assurance environments.
• Eligibility for chartership in auditing or cyber security, current chartership, or demonstrable Principal-to-Chartered level experience.
• Strong practical knowledge of audit principles, assurance methodologies, control testing and evidence evaluation.

Responsibilities

• Lead cyber security audit, assurance and certification engagements across the full audit lifecycle.
• Act as Lead Auditor or Lead Assessor on high-assurance and regulated work.
• Assess control design and operational effectiveness across people, process, technology and third-party dependencies.
• Run structured audit interviews, evidence reviews, sampling and testing.
• Produce clear, defensible audit and certification reports.
• Present findings to senior, executive and non-technical stakeholders.
• Support audit methodology, quality controls and assurance process improvement.
• Mentor other cyber security and assurance specialists.

Skills

Cyber audit leadership

Client-facing

Defence/government experience

Audit methodologies

Chartered level/eligibility

Education

Chartered auditor or cyber security professional

Job description

Location: Cheltenham area, flexible hybrid working with ideally 1 to 2 days onsite per week

Sector: Defence, national security and highly regulated cyber assurance

We are working with a specialist defence and security consultancy that supports complex UK defence, government and high-assurance programmes. This is a senior opportunity for an experienced cyber audit and assurance professional who can lead client-facing engagements, provide technical authority and help shape assurance quality across critical environments.

You will lead external cyber security audit, assurance and certification engagements across the full audit lifecycle, including scoping, planning, fieldwork, evidence review, reporting and follow-up. The role includes work across Defence Cyber Certification, Cyber Essentials, ISO/IEC 27001, NIST and other recognised assurance frameworks.

This would suit a Principal-level cyber audit specialist, or a strong Senior Consultant ready to step up, who can combine technical audit rigour with a calm, credible and consultative style.

What you’ll be doing

• Leading cyber security audit, assurance and certification engagements.
• Acting as Lead Auditor or Lead Assessor on high-assurance and regulated work.
• Assessing control design and operational effectiveness across people, process, technology and third-party dependencies.
• Running structured audit interviews, evidence reviews, sampling and testing.
• Producing clear, defensible audit and certification reports.
• Presenting findings to senior, executive and non-technical stakeholders.
• Supporting audit methodology, quality controls and assurance process improvement.
• Mentoring other cyber security and assurance specialists.

What we’re looking for

• Significant cyber security audit and assurance experience, ideally in defence, government, regulated or high-assurance environments.
• Eligibility for chartership in auditing or cyber security, current chartership, or demonstrable Principal-to-Chartered level experience.
• Strong practical knowledge of audit principles, assurance methodologies, control testing and evidence evaluation.
• Experience with ISO/IEC 27001, NIST, Cyber Essentials and defence-focused assurance schemes.
• Strong client-facing skills, including the ability to explain complex assurance matters clearly.
• Confidence leading senior conversations with clients, boards, audit committees or senior management.
• A collaborative, professional style with the credibility to work in a consultancy environment.

Why this opportunity stands out

• Work on meaningful defence and national security programmes.
• Join a specialist consultancy with strong expertise across cyber assurance and resilience.
• Principal-level scope with visible client impact.
• Opportunity to support DCC capability, assurance maturity and chartership-focused professional standards.
• Flexible hybrid working and a strong salary package.