Cyber Assurance Lead

Morson Group; Greater London; On-site; GBP 83,000 - 138,000; Full time

Job summary

Morson Group is recruiting a Cyber Assurance Lead for a six-month contract in central London. The role provides independent oversight of cyber security controls across a nuclear programme, ensuring secure lifecycle management and resilience against evolving threats.

You will lead assurance activities, audits, risk assessments and remediation work, communicating findings to technical teams and senior stakeholders.

Qualifications

• Experience in cyber security risk assessments within regulated environments.
• Experience leading cyber assurance audits and overseeing remediation and control implementation.
• Knowledge of ISO 27001, COBIT 5 or equivalent.
• Experience in an Azure Cloud environment.
• Ability to communicate complex security findings to technical and senior stakeholders.
• Security certifications such as CISSP, CISM, Lead Security Auditor or CEH would be desirable.

Responsibilities

• Lead cyber security assurance activities across systems and programmes throughout their lifecycle.
• Verify that cyber security controls have been implemented in line with risk assessments and risk management plans.
• Develop and deliver detailed cyber security audit and assurance plans.
• Assess the effectiveness of security controls, including their ongoing operation and maintenance.
• Conduct cyber security risk assessments, audits and compliance reviews within a highly regulated environment.
• Produce clear, detailed audit and assurance reports, presenting findings to technical and senior management audiences.
• Oversee remediation activities and ensure agreed mitigation actions are effectively implemented.
• Review compliance against relevant legal, regulatory and organisational requirements.
• Provide expert advice on cyber assurance, audit, risk management and security governance.
• Assess security hardening, vulnerability management and security testing activities.
• Promote a strong security culture across the programme.

Skills

Cyber risk assessment

Risk management

Audit leadership

Security frameworks

Azure security

Windows security controls

Firewall technologies

Security hardening

Threat intelligence

Stakeholder communication

Security certifications

Tools

Azure

Windows Security

Firewall technologies

Job description

Cyber Assurance Lead - £750 per day - Inside IR35 - Hybrid working in central London - 6 month initial contract.

We are supporting a major nuclear new-build programme in the UK and are looking for an experienced Cyber Assurance Lead to play a key role in ensuring the security and resilience of critical systems throughout their lifecycle.

This is a senior assurance position, providing independent oversight that cyber security controls are appropriately defined, implemented, operated and maintained. You will work across a complex, highly regulated environment, helping to ensure that systems remain secure as threats evolve and technology and operational requirements change.

As the Cyber Assurance Lead, you will act as a key line of defence, conducting assurance activities, audits and assessments, identifying vulnerabilities and risks, and working with technical and business stakeholders to ensure effective mitigation.

Key Responsibilities

• Lead cyber security assurance activities across systems and programmes throughout their lifecycle.
• Verify that cyber security controls have been implemented in line with risk assessments and risk management plans.
• Develop and deliver detailed cyber security audit and assurance plans.
• Assess the effectiveness of security controls, including their ongoing operation and maintenance.
• Conduct cyber security risk assessments, audits and compliance reviews within a highly regulated environment.
• Produce clear, detailed audit and assurance reports, presenting findings and recommendations to both technical and senior management audiences.
• Oversee remediation activities and ensure agreed mitigation actions are effectively implemented.
• Review compliance against relevant legal, regulatory and organisational requirements.
• Provide expert advice on cyber assurance, audit, risk management and security governance.
• Assess security hardening, vulnerability management and security testing activities.
• Work closely with stakeholders to promote a strong security culture and ensure cyber assurance remains embedded throughout the programme.

What Were Looking For

Were looking for an experienced cyber security professional with a strong background in cyber assurance, risk and governance, ideally gained within a regulated or safety-critical environment.

You Should have

• Proven experience conducting cyber security risk assessments within a regulated environment nuclear experience would be highly advantageous.
• Experience implementing and managing Cyber Security Risk Management Plans.
• Previous experience leading cyber assurance audits and overseeing remediation and control implementation.
• Strong knowledge of cyber security standards and frameworks such as ISO 27001, COBIT 5 or equivalent.
• Experience across security technologies including Azure identity and networking, Windows security controls and firewall technologies.
• Knowledge of security hardening, testing and vulnerability management.
• Experience of cyber security risk management and governance, including relevant legal and regulatory requirements.
• Experience working within an Azure Cloud environment.
• Strong understanding of adversarial behaviours and evolving cyber threats.
• The ability to communicate complex security findings clearly to both technical specialists and senior stakeholders.
• Relevant professional certifications such as CISSP, CISM, Lead Security Auditor or CEH would be highly desirable.

Why Join?

• This is an opportunity to work on one of the UKs most significant nuclear new-build programmes, contributing to the secure delivery of critical national infrastructure.
• You will have the opportunity to operate at programme level, working with a broad range of technical, engineering and business stakeholders and helping shape the cyber assurance approach across a complex and evolving environment.

If you are an experienced cyber assurance professional looking for a role where your expertise will have genuine impact, wed be keen to hear from you.