CISO / Cyber Security Assurance Lead (EUC / MDM Focus)

JR United Kingdom; Chester; Hybrid; GBP 60,000 - 90,000; Full time

Job summary

A leading cyber security role in Chester seeks a Cyber Security Assurance Lead to guide modernisation using Zero Trust principles. Must possess extensive experience in security assurance, especially within government sectors, alongside professional certifications such as CISSP or CISM. The position offers hybrid working with a focus on high-profile government departments and requires current security clearance.

Qualifications

• Strong understanding of endpoint/device assurance with macOS.
• Experience in high-assurance government environments.
• Current Security Clearance required.

Responsibilities

• Lead security assurance and governance through the solution lifecycle.
• Ensure compliance with assurance frameworks like GSC and NCSC.
• Conduct threat and vulnerability assessments.

Skills

Endpoint assurance

Device assurance

Security assessment

Risk management

Threat modeling

Education

CISSP

CISM

CCSP

ISO 27001 Lead Auditor

Tools

Jamf

Intune

Workspace ONE

Job description

Job Title: CISO / Cyber Security Assurance Lead (EUC / MDM Focus), Chester

Client:

Refreshing Recruitment Ltd

Location:

Chester, United Kingdom

Job Category:

Other

EU work permit required:

Yes

Job Views:

2

Posted:

07.06.2025

Expiry Date:

22.07.2025

Job Description:

This role requires security clearance and is based in Central London with hybrid working. It is a 6+ month contract.

We are seeking a Cyber Security Assurance Lead, often referred to as a "mini CISO," to join a specialist End User Compute (EUC) IT services provider. The focus is on leading the modernisation of secure digital workplaces using Zero Trust and next-generation security principles for high-profile Central Government departments, hence the requirement for current SC clearance.

As the Cyber Security Assurance Lead, you will oversee end-to-end EUC security assurance for a transformative Machinery of Government, macOS Developer Device Solution.

Key responsibilities include:

• Leading security assurance and governance throughout the solution lifecycle, including architecture design, build, deployment, and operational support.
• Developing and maintaining risk management documentation such as RMADS, SyOps, DPIAs, threat models, and continuous threat assessments.
• Ensuring compliance with assurance frameworks like GSC, NCSC guidance, Cabinet Office requirements, GDPR, and ISO27001.
• Conducting threat and vulnerability assessments for macOS devices, MDM platforms, developer tooling, remote access, and cloud infrastructure.
• Promoting secure-by-design practices in collaboration with security architects, engineering, DevOps, and testing teams.
• Engaging with stakeholders to obtain necessary approvals and accreditation.
• Maintaining assurance registers and contributing to risk management and reporting across the program.

Ideal candidates will have a strong understanding of endpoint and device assurance, particularly with macOS and MDM solutions like Jamf, Intune, or Workspace ONE, and possess:

• Professional certifications such as CISSP, CISM, CCSP, or ISO 27001 Lead Auditor.
• Experience leading security assurance in government or similar high-assurance environments.
• Deep knowledge of security assurance frameworks, including NCSC Cloud Security principles, GDS Service Standards, and government accreditation processes.
• Hands-on experience producing RMADS, SyOps, DPIAs, and similar artifacts.
• Proficiency with security tooling for risk assessments, threat modeling, and vulnerability scanning.
• Current Security Clearance.

Additional preferred skills include experience with DevSecOps or agile methodologies, Zero Trust architecture, IAM, and cloud-native security practices.