CISO / Cyber Security Assurance Lead (EUC / MDM Focus)

JR United Kingdom; Liverpool; Hybrid; GBP 60,000 - 90,000; Full time

Job summary

A leading specialist in IT services seeks a Cyber Security Assurance Lead to oversee endpoint security for high-profile government projects. The role involves ensuring compliance with security frameworks, conducting assessments, and driving secure-by-design practices in a hybrid working environment.

Qualifications

• Strong understanding of endpoint and device assurance.
• Experience leading security assurance in central government.
• Hands-on experience producing RMADS, SyOps, DPIAs.

Responsibilities

• Leading security assurance and governance throughout the solution lifecycle.
• Ensuring compliance with assurance frameworks like GDPR and ISO27001.
• Conducting threat and vulnerability assessments for macOS devices.

Skills

Endpoint assurance

macOS security

MDM platforms

Security tooling

Zero Trust architecture

Education

Professional certifications like CISSP, CISM, CCSP, or ISO 27001 Lead Auditor

Tools

Jamf

Intune

Workspace ONE

Job description

Social network you want to login/join with:

CISO / Cyber Security Assurance Lead (EUC / MDM Focus), Liverpool

Client: Refreshing Recruitment Ltd

Location: Liverpool, United Kingdom

Job Category: Other

-

EU work permit required:

Yes

Job Views:

2

Posted:

07.06.2025

Expiry Date:

22.07.2025

Job Description:

Security Clearance required.

Central London, hybrid working.

6+ month contract.

A Cyber Security Assurance Lead, often referred to as "a mini CISO," is sought to join a specialist End User Compute (EUC) IT services provider. The role involves leading the modernisation of secure digital workplaces with Zero Trust and next-generation security principles for high-profile Central Government departments, hence the need for current SC clearance.

As the Cyber Security Assurance Lead, you will oversee end-to-end EUC security assurance for a transformational Machinery of Government, macOS Developer Device Solution.

Key responsibilities include:

• Leading security assurance and governance throughout the solution lifecycle, including architecture design, build, deployment, and operational support.
• Developing and maintaining risk management documentation such as RMADS, SyOps, DPIAs, threat models, and continuous threat assessments.
• Ensuring compliance with assurance frameworks like Government Security Classifications (GSC), NCSC guidance, Cabinet Office requirements, GDPR, and ISO27001.
• Conducting threat and vulnerability assessments for macOS devices, MDM platforms, developer tooling, remote access, and cloud-native infrastructure.
• Driving secure-by-design practices in collaboration with security architects, engineering, DevOps, and testing teams.
• Interfacing with stakeholders to obtain necessary approvals and accreditation.
• Maintaining assurance registers and contributing to programme-wide risk management and reporting.

We are seeking candidates with a strong understanding of endpoint and device assurance, ideally with experience in macOS and MDM platforms such as Jamf, Intune, or Workspace ONE, and:

• Professional certifications like CISSP, CISM, CCSP, or ISO 27001 Lead Auditor.
• Experience leading security assurance in central government or similar high-assurance environments.
• Deep understanding of security assurance frameworks, including NCSC Cloud Security principles, GDS Service Standards, and government accreditation processes.
• Hands-on experience producing RMADS, SyOps, DPIAs, and similar artefacts.
• Experience with security tooling for risk assessments, threat modelling, and vulnerability scanning.
• Security Clearance.

Preferred skills include experience in DevSecOps or agile environments, knowledge of Zero Trust architecture, IAM, and cloud-native security practices.