CISO / Cyber Security Assurance Lead (EUC / MDM Focus)

JR United Kingdom; Reading; Hybrid; GBP 60,000 - 90,000; Full time

Job summary

A leading IT services provider is looking for a Cyber Security Assurance Lead, also known as a mini CISO, to enhance secure digital workplaces for central government departments. This role requires extensive knowledge of security assurance frameworks and a current Security Clearance, involving responsibilities from risk management documentation to compliance with government standards.

Qualifications

• Deep knowledge of security assurance frameworks.
• Experience leading security assurance in government environments.
• Current Security Clearance required.

Responsibilities

• Lead security assurance and governance throughout the solution lifecycle.
• Develop and maintain risk management documentation.
• Conduct threat and vulnerability assessments for macOS devices and MDM platforms.

Skills

Endpoint and device assurance

Threat modeling

Vulnerability scanning

Risk assessments

Education

CISSP certification

CISM certification

ISO 27001 Lead Auditor certification

CCSP certification

Tools

Jamf

Intune

Workspace ONE

Job description

Job Title: CISO / Cyber Security Assurance Lead (EUC / MDM Focus)

Client: Refreshing Recruitment Ltd

Location: Reading, United Kingdom

Job Category: Other

EU work permit required: Yes

Job Views: 2

Posted: 07.06.2025

Expiry Date: 22.07.2025

Job Description:

Security Clearance required. This role is based in Central London with hybrid working arrangements. It is a 6+ month contract.

We are seeking a Cyber Security Assurance Lead, often referred to as a “mini CISO,” to join a specialist End User Compute (EUC) IT services provider. The role involves leading the modernization of secure digital workplaces using Zero Trust and next-generation security principles for high-profile Central Government departments, hence the requirement for current SC clearance.

As the Cyber Security Assurance Lead, you will oversee end-to-end EUC security assurance for a transformational Machinery of Government project involving macOS Developer Device Solutions.

Key responsibilities include:

• Leading security assurance and governance throughout the solution lifecycle, including architecture design, build, deployment, and operational support.
• Developing and maintaining risk management documentation such as RMADS, SyOps, DPIAs, threat models, and continuous threat assessments.
• Ensuring compliance with assurance frameworks like GSC, NCSC guidance, Cabinet Office requirements, GDPR, and ISO27001.
• Conducting threat and vulnerability assessments for macOS devices, MDM platforms, developer tooling, remote access, and cloud-native infrastructure.
• Promoting secure-by-design practices in collaboration with security architects, engineering, DevOps, and testing teams.
• Engaging with stakeholders to obtain necessary approvals and certifications.
• Maintaining assurance registers and contributing to program-wide risk management and reporting.

Ideal candidates will have a strong understanding of endpoint and device assurance, especially with macOS and MDM solutions such as Jamf, Intune, or Workspace ONE. Required qualifications include:

• Professional certifications like CISSP, CISM, CCSP, or ISO 27001 Lead Auditor.
• Experience leading security assurance in central government or similar high-assurance environments.
• Deep knowledge of security assurance frameworks, including NCSC Cloud Security principles, GDS Service Standards, and government accreditation processes.
• Hands-on experience producing RMADS, SyOps, DPIAs, and similar artifacts.
• Proficiency with security tools for risk assessments, threat modeling, and vulnerability scanning.
• Current Security Clearance.

Additional preferred skills include experience in DevSecOps or agile environments, knowledge of Zero Trust architecture, IAM, and cloud-native security practices.