CISO / Cyber Security Assurance Lead (EUC / MDM Focus)

JR United Kingdom; City of Edinburgh; On-site; GBP 60,000 - 90,000; Full time

Job summary

A leading IT services provider is seeking a Cyber Security Assurance Lead in Edinburgh to drive end-to-end security assurance for high-profile government departments. The role involves modernising secure digital workplaces with Zero Trust principles and requires security clearance along with specialized knowledge of endpoint assurance.

Qualifications

• Strong understanding of endpoint and device assurance, ideally with macOS.
• Experience leading security assurance in central government or high assurance environments.
• Hands-on experience producing RMADS, SyOps, DPIAs, and equivalent artefacts.

Responsibilities

• Lead security assurance and governance throughout the solution lifecycle.
• Develop and maintain risk management documentation.
• Conduct threat and vulnerability assessments for macOS devices.

Skills

Endpoint and device assurance

Risk management documentation

Security assurance frameworks

Threat and vulnerability assessments

Secure-by-design practices

Education

CISSP certification

CISM certification

CCSP certification

ISO 27001 Lead Auditor certification

Tools

Jamf

Intune

Workspace ONE

Security tooling for vulnerability scanning

Job description

Social network you want to login/join with:

CISO / Cyber Security Assurance Lead (EUC / MDM Focus), Edinburgh

Client: Refreshing Recruitment Ltd

Location: Edinburgh, United Kingdom

Job Category: Other

-

EU work permit required:

Yes

Job Views:

2

Posted:

07.06.2025

Expiry Date:

22.07.2025

Job Description:

Security Clearance required. Central London, hybrid working. 6+ month contract.

A Cyber Security Assurance Lead, “a mini CISO,” is sought to join a specialist End User Compute (EUC) IT services provider, leading the modernisation of secure digital workplaces with Zero Trust and next-gen security principles for high-profile Central Government departments—hence the need for current SC clearance.

As Cyber Security Assurance Lead, you will drive end-to-end EUC security assurance for a transformational Machinery of Government, macOS Developer Device Solution.

Key accountabilities include:

• Leading security assurance and governance throughout the solution lifecycle (architecture design, build, deployment & operational support).
• Development and maintenance of risk management documentation (RMADS, SyOps, DPIAs, threat models, continuous threat models).
• Ensuring alignment with assurance frameworks (Government Security Classifications (GSC), NCSC guidance, Cabinet Office requirements, GDPR, ISO27001).
• Conducting threat and vulnerability assessments for macOS devices, MDM platforms, developer tooling, remote access, and cloud-native infrastructure.
• Driving secure-by-design practices, collaborating with security architects, engineering DevOps, and testing teams.
• Interfacing with stakeholders to gain necessary approvals and accreditation.
• Maintaining assurance registers and contributing to programme-wide risk management & reporting.

We are seeking applications from candidates with a strong understanding of endpoint and device assurance, ideally with macOS and integration with MDM (e.g., Jamf, Intune, Workspace ONE), and:

• Professional certifications such as CISSP, CISM, CCSP, or ISO 27001 Lead Auditor
• Experience leading security assurance in central government or similar high assurance environments.
• Deep understanding of security assurance frameworks, including NCSC Cloud Security principles, GDS Service Standards, and government accreditation processes.
• Hands-on experience producing RMADS, SyOps, DPIAs, and equivalent artefacts.
• Experience with security tooling for risk assessments, threat modelling, and vulnerability scanning.
• Current Security Clearance.

Other preferred skills include experience in DevSecOps or agile environments, knowledge of Zero Trust architecture, IAM, and cloud-native security practices.