Cyber Security Assurance Manager

GCS; Barking; Hybrid; GBP 111,000 - 148,000; Full time

Job summary

GCS is seeking a Cyber Security Assurance Manager to lead a risk-based assurance programme across a complex global environment. You will independently assess the effectiveness of security controls, drive assurance activity, and mentor a small team of analysts.

This senior role requires deep expertise in cyber risk management, security testing, and reporting to senior stakeholders. Start ASAP with a 6-month contract and a competitive day rate, London-based with one day onsite per week.

Qualifications

• Experience leading second-line assurance in large complex enterprises.
• Proven ability to assess technical controls across cloud, on-prem, network and apps.
• Ability to produce executive-level reporting and risk insights.
• Strong stakeholder management and ability to challenge senior leaders.

Responsibilities

• Lead the delivery of a large-scale cyber technical assurance programme.
• Manage and mentor a team of Technical Assurance Analysts.
• Conduct independent second-line assessments of cyber security controls.
• Review evidence and assess design and operating effectiveness of controls.
• Oversee testing across cloud, infrastructure, networks, applications and identity.
• Drive continuous controls monitoring and data-driven reporting.
• Track remediation and escalate significant findings.
• Develop executive dashboards and cyber risk metrics.
• Partner with Cyber Security, Internal Audit, Risk, Compliance, Legal and Technology teams.
• Act as SME on cyber assurance and control effectiveness.

Skills

Cyber security assurance

Technology risk

IT audit

Security testing

Cyber risk management

Stakeholder management

Board reporting

Education

Security certifications (e.g., CISSP/CISM)

Tools

PowerShell

Python

API automation

Job description

Cyber Security Assurance Manager

Contract: 6 Months
Location: London (1 day per week onsite / flexible)
Day Rate: Competitive
Start: ASAP

We're supporting a large, international enterprise in the search for an experienced Cyber Security Assurance Manager to lead a cyber assurance and control effectiveness programme across a complex global environment.

This is a senior second-line cyber security position, responsible for independently assessing the effectiveness of security controls, driving assurance activity, overseeing technical reviews, and providing risk-based insight to senior stakeholders. The successful contractor will lead a small team while acting as a trusted adviser across cyber security, technology, audit and risk functions.

The Opportunity

You will own the planning and delivery of a risk-based technical assurance programme, providing independent oversight of security controls across infrastructure, cloud, identity, applications, vulnerability management, data security and incident response capabilities.

The role combines technical cyber security expertise, assurance methodology, stakeholder engagement and leadership. You'll engage with senior business and technology leaders, deliver actionable reporting, challenge control weaknesses, and drive continuous improvement across the control environment.

Key Responsibilities

• Lead the delivery of a large-scale cyber technical assurance programme.


• Manage and mentor a team of Technical Assurance Analysts.


• Conduct independent second-line assessments of cyber security controls and control effectiveness.


• Review technical evidence, validate findings and assess both design and operating effectiveness of controls.


• Oversee control testing activities across cloud, infrastructure, networks, applications and identity environments.


• Drive continuous controls monitoring, automated assurance and data-driven reporting capabilities.


• Track remediation activities and ensure significant findings are appropriately managed and escalated.


• Develop executive-level reporting, dashboards and cyber risk metrics.


• Partner with Cyber Security, Internal Audit, Risk, Compliance, Legal and Technology teams to improve security outcomes.


• Act as a subject matter expert on cyber assurance, risk and control effectiveness.

Required Experience

• Strong background in Cyber Security Assurance, Technology Risk, IT Audit, Security Testing or Cyber Risk Management.


• Experience leading assurance reviews within large, complex enterprise environments.


• Deep understanding of second-line assurance and control effectiveness assessment.


• Experience assessing technical controls across cloud, infrastructure, identity, networks and applications.


• Strong working knowledge of frameworks such as:


• ISO 27001


• NIST Cybersecurity Framework


• NIST 800-53


• CIS Controls


• MITRE ATT&CK


• Experience producing board-level reporting and translating technical findings into business risk.


• Excellent stakeholder management skills, with the ability to challenge constructively and influence senior leaders.

Desirable Experience

• Continuous Controls Monitoring (CCM) platforms.


• Automated assurance and evidence collection.


• PowerShell, Python or API-based automation.


• Cloud security assurance and modern identity controls.


• CISSP, CISM, CISA, CRISC, CCSP or ISO 27001 Lead Auditor certifications.