Cyber Security Assurance Manager

GCS; City Of London; Hybrid; GBP 92,000 - 166,000; Full time

Job summary

GCS in London is seeking a Cyber Security Assurance Manager on a 6-month contract, with a London onsite requirement of 1 day per week. The role offers a day-rate and an ASAP start, focusing on a global assurance programme across complex environments.

You will independently assess control effectiveness, drive assurance activity, oversee technical reviews and provide risk-based insights to senior stakeholders, while leading a small team of assurance analysts and coordinating with cyber, risk and

Qualifications

• Experience leading cyber security assurance in large enterprises.
• Proven ability to run risk-based assurance programmes.
• Ability to present to senior stakeholders.
• Knowledge of ISO 27001, NIST CSF, NIST 800-53, CIS Controls, MITRE ATT&CK.

Responsibilities

• Lead delivery of a large-scale cyber technical assurance programme.
• Mentor a team of Technical Assurance Analysts.
• Conduct independent second-line assessments of cyber security controls.
• Review technical evidence, validate findings and assess design and operating effectiveness of controls.
• Develop executive-level reporting, dashboards and cyber risk metrics.

Job description

Cyber Security Assurance Manager

Contract: 6 Months

Location: London (1 day per week onsite / flexible)

Day Rate: Competitive

Start: ASAP

We're supporting a large, international enterprise in the search for an experienced Cyber Security Assurance Manager to lead a cyber assurance and control effectiveness programme across a complex global environment.

This is a senior second-line cyber security position, responsible for independently assessing the effectiveness of security controls, driving assurance activity, overseeing technical reviews, and providing risk-based insight to senior stakeholders. The successful contractor will lead a small team while acting as a trusted adviser across cyber security, technology, audit and risk functions.

The Opportunity

You will own the planning and delivery of a risk-based technical assurance programme, providing independent oversight of security controls across infrastructure, cloud, identity, applications, vulnerability management, data security and incident response capabilities.

The role combines technical cyber security expertise, assurance methodology, stakeholder engagement and leadership. You’ll engage with senior business and technology leaders, deliver actionable reporting, challenge control weaknesses, and drive continuous improvement across the control environment.

Key Responsibilities

• Lead the delivery of a large-scale cyber technical assurance programme.
• Manage and mentor a team of Technical Assurance Analysts.
• Conduct independent second-line assessments of cyber security controls and control effectiveness.
• Review technical evidence, validate findings and assess both design and operating effectiveness of controls.
• Oversee control testing activities across cloud, infrastructure, networks, applications and identity environments.
• Drive continuous controls monitoring, automated assurance and data-driven reporting capabilities.
• Track remediation activities and ensure significant findings are appropriately managed and escalated.
• Develop executive-level reporting, dashboards and cyber risk metrics.
• Partner with Cyber Security, Internal Audit, Risk, Compliance, Legal and Technology teams to improve security outcomes.
• Act as a subject matter expert on cyber assurance, risk and control effectiveness.

Required Experience

• Strong background in Cyber Security Assurance, Technology Risk, IT Audit, Security Testing or Cyber Risk Management.
• Experience leading assurance reviews within large, complex enterprise environments.
• Deep understanding of second-line assurance and control effectiveness assessment.
• Experience assessing technical controls across cloud, infrastructure, identity, networks and applications.
• Strong working knowledge of frameworks such as: ISO 27001, NIST Cybersecurity Framework, NIST 800-53, CIS Controls, MITRE ATT&CK.
• Experience producing board-level reporting and translating technical findings into business risk.
• Excellent stakeholder management skills, with the ability to challenge constructively and influence senior leaders.

Desirable Experience

• Continuous Controls Monitoring (CCM) platforms.
• Automated assurance and evidence collection.
• PowerShell, Python or API-based automation.
• Cloud security assurance and modern identity controls.
• CISSP, CISM, CISA, CRISC, CCSP or ISO 27001 Lead Auditor certifications.