CISO / Cyber Security Assurance Lead (EUC / MDM Focus)

JR United Kingdom; Hounslow; On-site; GBP 70,000 - 100,000; Full time

Job summary

A leading IT services provider in South West London is seeking a Cyber Security Assurance Lead to modernize secure digital workplaces using next-generation security principles for governmental departments. Candidates must possess strong qualifications in security frameworks and hold current SC clearance.

Qualifications

• Strong understanding of endpoint assurance, especially with macOS and MDM platforms.
• Experience leading security assurance in central government environments.
• Active Security Clearance is mandatory.

Responsibilities

• Lead security assurance and governance throughout the solution lifecycle.
• Develop risk management documentation and conduct threat assessments.
• Ensure compliance with assurance frameworks and promote secure-by-design practices.

Skills

Endpoint and device assurance

Security assurance frameworks

Risk management documentation

Security tools for assessments

Zero Trust architecture

Education

CISSP

CISM

CCSP

ISO 27001 Lead Auditor

Tools

Jamf

Intune

Workspace ONE

Job description

Job Title:

CISO / Cyber Security Assurance Lead (EUC / MDM Focus), South West London

Client:

Refreshing Recruitment Ltd

Location:

South West London, United Kingdom

Job Category:

Other

EU Work Permit Required:

Yes

Job Views:

2

Posted:

07.06.2025

Expiry Date:

22.07.2025

Job Description:

We are seeking a Cyber Security Assurance Lead, often described as a "mini CISO," to join a specialist End User Compute (EUC) IT services provider. The role involves leading the modernization of secure digital workplaces using Zero Trust and next-generation security principles, primarily for high-profile Central Government departments, hence the requirement for current SC clearance.

The successful candidate will oversee end-to-end EUC security assurance for a transformational Machinery of Government, macOS Developer Device Solution.

Key Responsibilities:

• Lead security assurance and governance throughout the solution lifecycle, including architecture design, build, deployment, and operational support.
• Develop and maintain risk management documentation such as RMADS, SyOps, DPIAs, threat models, and continuous threat assessments.
• Ensure compliance with assurance frameworks like GSC, NCSC guidance, Cabinet Office requirements, GDPR, and ISO27001.
• Conduct threat and vulnerability assessments for macOS devices, MDM platforms, developer tooling, remote access, and cloud infrastructure.
• Promote secure-by-design practices in collaboration with security architects, DevOps, and testing teams.
• Engage with stakeholders to obtain necessary approvals and accreditation.
• Maintain assurance registers and contribute to programme-wide risk management and reporting.

Applicants should have a strong understanding of endpoint and device assurance, especially with macOS and MDM platforms (e.g., Jamf, Intune, Workspace ONE), and possess:

• Professional certifications such as CISSP, CISM, CCSP, or ISO 27001 Lead Auditor
• Experience leading security assurance in central government or similar high-assurance environments
• Deep knowledge of security assurance frameworks, including NCSC Cloud Security principles, GDS Service Standards, and government accreditation processes
• Hands-on experience producing RMADS, SyOps, DPIAs, and similar artefacts
• Proficiency with security tools for risk assessments, threat modelling, and vulnerability scanning
• Active Security Clearance

Preferred skills include experience with DevSecOps or agile environments, knowledge of Zero Trust architecture, IAM, and cloud-native security practices.