CISO / Cyber Security Assurance Lead (EUC / MDM Focus)

JR United Kingdom; Chelmsford; Hybrid; EUR 80,000 - 110,000; Full time

Job summary

Une entreprise spécialisée en services informatiques recherche un Cyber Security Assurance Lead (mini CISO) basé à Chelmsford pour diriger la modernisation des lieux de travail numériques. Le rôle nécessite une expertise en assurance de sécurité, la production de documentation de gestion des risques et l'engagement avec des parties prenantes pour des approbations nécessaires. Les candidats doivent posséder des certifications professionnelles et une expérience pertinente dans des environnements gouvernementaux.

Qualifications

• Compréhension forte de l'assurance des points de terminaison et des dispositifs, idéalement avec expérience sur macOS et plateformes MDM.
• Expérience en gouvernance de la sécurité dans des environnements de haute assurance.
• Connaissance approfondie des cadres d'assurance de sécurité.

Responsibilities

• Diriger l'assurance et la gouvernance de la sécurité tout au long du cycle de vie de la solution.
• Développer et maintenir la documentation de gestion des risques.
• Assurer l'alignement avec les cadres d'assurance et mener des évaluations de menaces.

Skills

Security Assurance

Risk Management

Zero Trust Architecture

Threat Modeling

Cloud Security

Endpoint and Device Assurance

Education

CISSP

CISM

CCSP

ISO 27001 Lead Auditor

Tools

Jamf

Intune

Workspace ONE

Job description

Social network you want to login/join with:

CISO / Cyber Security Assurance Lead (EUC / MDM Focus), Chelmsford

Client: Refreshing Recruitment Ltd

Location: Chelmsford, UK

Job Category: Other

EU work permit required: Yes

Job Views: 2

Posted: 07.06.2025

Expiry Date: 22.07.2025

Job Description:

Security Clearance required

Location: Central London, hybrid working

Contract Duration: 6+ months

A Cyber Security Assurance Lead, often referred to as a “mini CISO,” is sought to join a specialist End User Compute (EUC) IT services provider. The role involves leading the modernization of secure digital workplaces using Zero Trust and next-generation security principles for high-profile Central Government departments, hence the need for current SC clearance.

As the Cyber Security Assurance Lead, you will oversee end-to-end EUC security assurance for a transformational Machinery of Government, macOS Developer Device Solution.

Key responsibilities include:

• Leading security assurance and governance throughout the solution lifecycle, including architecture design, build, deployment, and operational support.
• Developing and maintaining risk management documentation such as RMADS, SyOps, DPIAs, threat models, and continuous threat assessments.
• Ensuring alignment with assurance frameworks like Government Security Classifications (GSC), NCSC guidance, Cabinet Office requirements, GDPR, and ISO27001.
• Conducting threat and vulnerability assessments for macOS devices, MDM platforms, developer tooling, remote access, and cloud-native infrastructure.
• Promoting secure-by-design practices in collaboration with security architects, engineering, DevOps, and testing teams.
• Engaging with stakeholders to secure necessary approvals and accreditation.
• Maintaining assurance registers and contributing to program-wide risk management and reporting.

We seek candidates with a strong understanding of endpoint and device assurance, ideally with experience in macOS and MDM platforms (e.g., Jamf, Intune, Workspace ONE), and with:

• Professional certifications such as CISSP, CISM, CCSP, or ISO 27001 Lead Auditor
• Experience leading security assurance in central government or similar high-assurance environments
• Deep knowledge of security assurance frameworks, including NCSC Cloud Security principles, GDS Service Standards, and government accreditation processes
• Hands-on experience producing RMADS, SyOps, DPIAs, and similar artifacts
• Proficiency with security tooling for risk assessments, threat modeling, and vulnerability scanning
• Current Security Clearance

Additional preferred skills include experience with DevSecOps or agile environments, knowledge of Zero Trust architecture, IAM, and cloud-native security practices.