Cyber Assurance Lead

Big Red Recruitment; Stevenage; Hybrid; GBP 97,000 - 102,000; Full time

Job summary

Big Red Recruitment is seeking a Cyber Security Delivery Lead to support a CISO-led security uplift programme following an internal audit. This is a 6‑month contract based in Stevenage with Hybrid working 1–2 days per week.

You will translate audit findings into practical security improvements, manage delivery across priority workstreams, and coordinate Microsoft E5 security enablement, PAM, tooling onboarding, SOC integration, and governance artefacts.

Qualifications

• Proven experience delivering cyber security programmes or transformations.
• Strong understanding of Microsoft security stack and IAM.
• Experience bridging technical and governance domains.

Responsibilities

• Lead delivery of priority cyber security workstreams.
• Own and coordinate Microsoft E5 security enablement.
• Implement and mature PAM controls and processes.
• Onboard, integrate, and tune security tools.
• Support SOC onboarding, use cases, and response processes.
• Develop and embed governance artefacts (policies, standards, controls).
• Capture requirements across business units and translate them into a delivery roadmap.
• Track milestones, risks, dependencies, and outcomes.
• Provide clear reporting to the CISO and senior stakeholders.

Skills

Cyber security delivery

Stakeholder engagement

Governance

Programme delivery

Technical security

Tools

Microsoft Defender

Entra ID

PAM

SOC tooling

Job description

Duration: 6 months
Rate: £525-£555 per day (Outside IR35)
Location: Stevenage (Hybrid 1-2 Days per Week)

We're looking for a Cyber Security Delivery Lead to support a CISO-led security uplift programme following an internal security audit. Whilst not hands-on you will need a technical understanding for this delivery-focused contract role, combining technical security enablement with governance and programme delivery.

Reporting directly to the CISO, you will act as the execution lead across a number of priority cyber initiatives, translating audit findings and business requirements into practical, deliverable security improvements.

The Role:

You will manage parts of a cyber security programme alongside core security activity, including:

• Microsoft onboarding to E5 (Defender, Identity, DLP, etc.)
• Privileged Access Management (PAM) and least-privilege controls
• Onboarding and operationalising security tooling
• Integrating tooling and logs into a SOC capability
• Delivering elements of a security governance programme (policies, controls, reporting)

This role blends technical delivery, stakeholder engagement, and governance, with responsibility for driving outcomes rather than just planning activity.

Key Responsibilities:

• Lead delivery of priority cyber security workstreams
• Own and coordinate Microsoft E5 security enablement
• Implement and mature PAM controls and processes
• Onboard, integrate, and tune security tools
• Support SOC onboarding, use cases, and response processes
• Develop and embed governance artefacts (policies, standards, controls)
• Capture requirements across business units and translate them into a delivery roadmap
• Track milestones, risks, dependencies, and outcomes
• Provide clear reporting to the CISO and senior stakeholders

What We're Looking For:

• Proven experience delivering cyber security programmes or transformations
• Technical Understanding of:

- Microsoft security stack (Defender, Entra ID, Purview, etc.)
- Privileged Access Management / PIM
- SOC integration or MSSP onboarding

• Experience working across technical and governance domains
• Comfortable engaging senior stakeholders and business units
• Strong delivery mindset - pragmatic, outcome-driven, and organised
• Background in regulated or complex enterprise environments preferred