CISO / Cyber Security Assurance Lead (EUC / MDM Focus)

JR United Kingdom; Cheltenham; Hybrid; GBP 70,000 - 100,000; Full time

Job summary

A specialist IT services provider seeks a Cyber Security Assurance Lead to modernize secure digital workplaces with Zero Trust principles. This role demands significant expertise in security assurance for high-profile government departments, focusing on macOS security, compliance frameworks, and stakeholder engagement. Candidates should possess relevant professional certifications and active Security Clearance.

Qualifications

• Strong knowledge of endpoint and device assurance, especially with macOS.
• Experience leading security assurance in high-assurance environments.
• Active Security Clearance is required.

Responsibilities

• Lead security assurance and governance throughout the solution lifecycle.
• Develop and maintain risk management documentation.
• Conduct threat and vulnerability assessments for macOS devices.

Skills

Endpoint assurance

macOS security

Zero Trust principles

Risk assessments

Security tooling

Education

CISSP

CISM

CCSP

ISO 27001 Lead Auditor

Job description

Social network you want to login/join with:

CISO / Cyber Security Assurance Lead (EUC / MDM Focus), Cheltenham

Client: Refreshing Recruitment Ltd

Location: Cheltenham, UK

Job Category: Other

-

EU work permit required:

Yes

Job Views: 2

Posted:

07.06.2025

Expiry Date:

22.07.2025

Job Description:

Security Clearance required

Location: Central London, hybrid working

Contract duration: 6+ months

A Cyber Security Assurance Lead, often referred to as a “mini CISO,” is sought to join a specialist End User Compute (EUC) IT services provider. The role involves leading the modernisation of secure digital workplaces with Zero Trust and next-generation security principles for high-profile Central Government departments, hence the need for current SC clearance.

As the Cyber Security Assurance Lead, you will oversee end-to-end EUC security assurance for a transformational Machinery of Government, macOS Developer Device Solution.

Key responsibilities include:

• Leading security assurance and governance throughout the solution lifecycle, from architecture design through build, deployment, and operational support.
• Developing and maintaining risk management documentation such as RMADS, SyOps, DPIAs, threat models, and continuous threat assessments.
• Ensuring compliance with assurance frameworks like Government Security Classifications (GSC), NCSC guidance, Cabinet Office requirements, GDPR, ISO27001.
• Conducting threat and vulnerability assessments for macOS devices, MDM platforms, developer tooling, remote access, and cloud-native infrastructure.
• Promoting secure-by-design practices in collaboration with security architects, engineering, DevOps, and testing teams.
• Engaging with stakeholders to secure necessary approvals and accreditation.
• Maintaining assurance registers and contributing to program-wide risk management and reporting.

We seek candidates with strong knowledge of endpoint and device assurance, especially with macOS and integration with MDM solutions like Jamf, Intune, or Workspace ONE, and who possess:

• Professional certifications such as CISSP, CISM, CCSP, or ISO 27001 Lead Auditor.
• Experience leading security assurance in central government or similar high-assurance environments.
• Deep understanding of security assurance frameworks, including NCSC Cloud Security principles, GDS Service Standards, and government accreditation processes.
• Hands-on experience producing RMADS, SyOps, DPIAs, and similar artifacts.
• Experience with security tooling for risk assessments, threat modeling, and vulnerability scanning.
• Active Security Clearance.

Additional preferred skills include experience in DevSecOps or agile environments, knowledge of Zero Trust architecture, IAM, and cloud-native security practices.