Cyber Assurance Manager

83zero Ltd; England; Hybrid; GBP 60,000 - 80,000; Full time

Job summary

A leading cybersecurity firm based in Portsmouth seeks a Cyber Security Assurance Manager to oversee the delivery and maintenance of critical cybersecurity certifications. The role involves engaging with customers to assure their security needs and enhancing the Security Operations Centre's compliance with various global regulations. Candidates should have a strong background in cybersecurity certifications, excellent communication skills, and the ability to manage multiple assurance projects effectively. This role will require time on-site at the Portsmouth location.

Qualifications

• Demonstrable experience delivering and maintaining cybersecurity certifications.
• Strong understanding of SOC operations and security assurance frameworks.
• Experience in customer-facing assurance activities such as audits and RFIs.

Responsibilities

• Lead the delivery and ongoing maintenance of key SOC-related certifications.
• Embed certification requirements into the SOC's governance and operational practices.
• Act as primary contact for customer assurance relating to SOC services.

Skills

Cybersecurity certifications delivery

Communication skills

Analytical skills

Stakeholder engagement

Organizational skills

Job description

Job Title: Cyber Security Assurance Manager

Location: UK-Portsmouth - 2/3 days on site

Overview

The Cyber Security Assurance Manager will be responsible for Security Operations Centres (SOC) achieves and maintains internationally recognised security certifications, audit reports, and assurance standards.

This role will focus on delivering and maintaining certifications such as ISO/IEC 27001, SOC2 Type II, Cyber Essentials Plus, CREST SOC accreditation, and sector-specific frameworks (PCI DSS, NCSC CIR/ CHECK)

Responsibilities

Certification Delivery & Maintenance

• Lead the delivery and ongoing maintenance of key SOC-related certifications including SOC 2 Type II, SOC 3, ISO/IEC 27001, Cyber Essentials Plus, and CREST.

Security Assurance for SOC Services

• Embed certification requirements into the SOC's governance, processes, and operational practices.

Customer Assurance Engagement

• Act as primary contact for customer assurance activities relating to SOC services.
• Support client RFIs, RFPs, and audit requests with accurate certification evidence and security documentation.
• Build customer-facing assurance packs that demonstrate Bell's security posture and SOC credibility.

Regulatory & Industry Alignment

• Monitor developments in global cybersecurity regulations and frameworks (e.g. NIST CSF, UK NCSC guidance, EU NIS2, GDPR).

Continuous Improvement & Reporting

• Drive continuous improvement in SOC assurance processes, reducing time to audit readiness and increasing efficiency of evidence collection.

Collaboration & Knowledge Sharing

• Work closely with SOC operations, Information Security, Risk & Compliance, and Commercial teams to embed assurance requirements into daily practice.

Qualifications

Required Qualifications and Experience

• Demonstrable experience delivering and maintaining cybersecurity certifications (ISO/IEC 27001, SOC 2 Type II, Cyber Essentials Plus, CREST).
• Strong understanding of SOC operations and security assurance frameworks.
• Experience in customer-facing assurance activities, including audits, RFIs, and RFPs.
• Knowledge of regulatory and industry frameworks including NIST CSF, GDPR, and UK NCSC guidance.
• Experience liaising with external auditors, regulators, and certification bodies.

Skills

• Strong ability to develop and maintain compliance documentation and audit evidence.
• Excellent communication skills to explain complex security assurance topics to customers, senior leaders, and SOC teams.
• Analytical and detail-oriented, with the ability to identify gaps and design improvements.
• Stakeholder engagement and influencing skills, particularly with technical and commercial teams.
• Organisational skills to manage multiple certifications and assurance projects simultaneously.