CISO / Cyber Security Assurance Lead (EUC / MDM Focus)

JR United Kingdom; Portsmouth; Hybrid; GBP 70,000 - 100,000; Full time

Job summary

A leading IT services provider is looking for a Cyber Security Assurance Lead to strengthen its EUC security efforts. The role focuses on overseeing security governance, compliance, and risk management for high-profile projects within the UK government and requires significant expertise in macOS and MDM solutions.

Qualifications

• Strong understanding of endpoint and device assurance, particularly macOS and MDM solutions.
• Experience leading security assurance in central government or similar environments.
• Proficient in producing RMADS, SyOps, and DPIAs.

Responsibilities

• Lead security assurance and governance throughout the solution lifecycle.
• Develop and maintain risk management documentation.
• Conduct threat and vulnerability assessments for macOS devices and cloud infrastructure.

Skills

macOS assurance

MDM solutions

Zero Trust architecture

risk management

security governance

Education

CISSP certification

CISM certification

CCSP certification

ISO 27001 Lead Auditor certification

Tools

Jamf

Intune

Workspace ONE

Job description

Job Title: CISO / Cyber Security Assurance Lead (EUC / MDM Focus) - Portsmouth, Hampshire

Client:

Refreshing Recruitment Ltd

Location:

Portsmouth, Hampshire, United Kingdom

Job Category:

Other

EU work permit required:

Yes

Job Views:

2

Posted:

07.06.2025

Expiry Date:

22.07.2025

Job Description:

Security Clearance required. This role is based in Central London with hybrid working arrangements and a 6+ month contract.

We are seeking a Cyber Security Assurance Lead, often referred to as a “mini CISO,” to join a specialist End User Compute (EUC) IT services provider. The candidate will lead the modernization of secure digital workplaces using Zero Trust and next-generation security principles for high-profile Central Government departments, requiring current SC clearance.

As a Cyber Security Assurance Lead, you will oversee end-to-end EUC security assurance for a transformational Machinery of Government, macOS Developer Device Solution.

Key responsibilities include:

1. Leading security assurance and governance throughout the solution lifecycle, from architecture design to deployment and operational support.
2. Developing and maintaining risk management documentation such as RMADS, SyOps, DPIAs, threat models, and continuous threat assessments.
3. Ensuring compliance with assurance frameworks including GSC, NCSC guidance, Cabinet Office requirements, GDPR, and ISO27001.
4. Conducting threat and vulnerability assessments for macOS devices, MDM platforms, developer tooling, remote access, and cloud infrastructure.
5. Promoting secure-by-design practices in collaboration with security architects, engineering, DevOps, and testing teams.
6. Engaging with stakeholders to obtain necessary approvals and accreditation.
7. Maintaining assurance registers and contributing to risk management and reporting across programs.

Ideal candidates will possess a strong understanding of endpoint and device assurance, especially with macOS and MDM solutions like Jamf, Intune, or Workspace ONE, and hold certifications such as CISSP, CISM, CCSP, or ISO 27001 Lead Auditor. Experience leading security assurance in central government or similar high-assurance environments is essential, along with proficiency in producing RMADS, SyOps, DPIAs, and using security tools for risk assessments and vulnerability scanning.

Additional preferred skills include experience in DevSecOps or agile environments, knowledge of Zero Trust architecture, IAM, and cloud-native security practices.