CISO / Cyber Security Assurance Lead (EUC / MDM Focus)

JR United Kingdom; York; Hybrid; GBP 65,000 - 85,000; Full time

Job summary

A leading company in the cyber security field is seeking a Cyber Security Assurance Lead to oversee secure digital workplace modernisation for government departments. This involves implementing Zero Trust principles and ensuring compliance with various security frameworks. Candidates must have strong skills in endpoint assurance, risk management, and experience in high-security environments, alongside relevant professional certifications.

Qualifications

• Strong understanding of macOS and MDM solutions like Jamf, Intune.
• Experience leading security assurance in central government or similar environments.
• Knowledge of security assurance frameworks and government accreditation processes.

Responsibilities

• Lead security assurance and governance from architecture to deployment.
• Develop and maintain risk management documentation.
• Conduct threat and vulnerability assessments for macOS and cloud infrastructure.

Skills

Endpoint assurance

Device assurance

Risk management

Threat modelling

Vulnerability scanning

Stakeholder engagement

Compliance

Education

Professional certifications (CISSP, CISM, CCSP, ISO 27001 Lead Auditor)

Job description

Social network you want to login/join with:

CISO / Cyber Security Assurance Lead (EUC / MDM Focus), York

Client: Refreshing Recruitment Ltd

Location:

Central London, hybrid working

Job Category:

Other

EU work permit required:

Yes

Job Views:

2

Posted:

07.06.2025

Expiry Date:

22.07.2025

Job Description:

Security Clearance required

This is a 6+ month contract for a Cyber Security Assurance Lead, often referred to as a “mini CISO”. The role involves leading the modernisation of secure digital workplaces for high-profile Central Government departments, implementing Zero Trust and next-gen security principles.

The key responsibilities include:

• Leading security assurance and governance throughout the solution lifecycle, from architecture design to deployment and operational support.
• Developing and maintaining risk management documentation such as RMADS, SyOps, DPIAs, threat models, and continuous threat assessments.
• Ensuring compliance with assurance frameworks like GSC, NCSC guidance, Cabinet Office requirements, GDPR, and ISO27001.
• Conducting threat and vulnerability assessments for macOS devices, MDM platforms, developer tooling, remote access, and cloud infrastructure.
• Promoting secure-by-design practices in collaboration with security architects, DevOps, and testing teams.
• Engaging with stakeholders for approvals and accreditation processes.
• Maintaining assurance registers and contributing to risk management and reporting at the programme level.

Candidates should have a strong understanding of endpoint and device assurance, especially with macOS and MDM solutions like Jamf, Intune, or Workspace ONE. Preferred qualifications include:

• Professional certifications such as CISSP, CISM, CCSP, or ISO 27001 Lead Auditor.
• Experience leading security assurance in central government or similar high-security environments.
• Deep knowledge of security assurance frameworks, including NCSC Cloud Security principles, GDS Service Standards, and government accreditation processes.
• Hands-on experience producing RMADS, SyOps, DPIAs, and similar artefacts.
• Proficiency with security tools for risk assessments, threat modelling, and vulnerability scanning.
• Active Security Clearance.

Additional skills that are advantageous include experience with DevSecOps, agile methodologies, Zero Trust architecture, IAM, and cloud-native security practices.