Cyber Security Assurance Manager

GCS Recruitment Specialists; Greater London; Hybrid; GBP 111,000 - 166,000; Full time

Job summary

GCS Recruitment Specialists is seeking an experienced Cyber Security Assurance Manager to lead a risk-based technical assurance programme across a complex global environment. The role combines senior leadership, hands-on assurance and collaboration with cyber security, IT, risk and audit teams.

Based in London with one day per week onsite, you will own planning, delivery and reporting of assurance activities, drive continuous improvement of controls and provide board-level insights to senior

Qualifications

• Strong background in Cyber Security Assurance, Technology Risk, IT Audit, Security Testing or Cyber Risk Management.
• Experience leading assurance reviews within large, complex enterprise environments.
• Deep understanding of second-line assurance and control effectiveness assessment.
• Experience assessing technical controls across cloud, infrastructure, identity, networks and applications.
• Knowledge of frameworks ISO 27001, NIST CSF, NIST 800-53, CIS Controls, MITRE ATT&CK.
• Experience producing board-level reporting and translating findings into business risk.
• Excellent stakeholder management, with ability to challenge and influence senior leaders.

Responsibilities

• Lead delivery of a large-scale cyber technical assurance programme.
• Manage and mentor a team of Technical Assurance Analysts.
• Conduct independent second-line assessments of cyber security controls.
• Review technical evidence and assess design and operating effectiveness.
• Oversee control testing across cloud, infrastructure, networks, applications and identity.
• Drive continuous controls monitoring and data-driven reporting.
• Develop executive-level reporting, dashboards and cyber risk metrics.
• Partner with Cyber Security, Internal Audit, Risk, Compliance, Legal and Technology teams.
• Act as SME on cyber assurance, risk and control effectiveness.

Skills

Cyber Security Assurance

Technology Risk

IT Audit

Security Testing

Cyber Risk Management

Stakeholder management

Leadership

Board reporting

Tools

PowerShell

Python

APIs

Automation tools

CCM platforms

Job description

Cyber Security Assurance Manager

Contract: 6 Months
Location: London (1 day per week onsite / flexible)
Day Rate: Competitive
Start: ASAP

We're supporting a large, international enterprise in the search for an experienced Cyber Security Assurance Manager to lead a cyber assurance and control effectiveness programme across a complex global environment.

This is a senior second-line cyber security position, responsible for independently assessing the effectiveness of security controls, driving assurance activity, overseeing technical reviews, and providing risk-based insight to senior stakeholders. The successful contractor will lead a small team while acting as a trusted adviser across cyber security, technology, audit and risk functions.

The Opportunity

You will own the planning and delivery of a risk-based technical assurance programme, providing independent oversight of security controls across infrastructure, cloud, identity, applications, vulnerability management, data security and incident response capabilities.

The role combines technical cyber security expertise, assurance methodology, stakeholder engagement and leadership. You'll engage with senior business and technology leaders, deliver actionable reporting, challenge control weaknesses, and drive continuous improvement across the control environment.

Key Responsibilities

• Lead the delivery of a large-scale cyber technical assurance programme.
• Manage and mentor a team of Technical Assurance Analysts.
• Conduct independent second-line assessments of cyber security controls and control effectiveness.
• Review technical evidence, validate findings and assess both design and operating effectiveness of controls.
• Oversee control testing activities across cloud, infrastructure, networks, applications and identity environments.
• Drive continuous controls monitoring, automated assurance and data-driven reporting capabilities.
• Track remediation activities and ensure significant findings are appropriately managed and escalated.
• Develop executive-level reporting, dashboards and cyber risk metrics.
• Partner with Cyber Security, Internal Audit, Risk, Compliance, Legal and Technology teams to improve security outcomes.
• Act as a subject matter expert on cyber assurance, risk and control effectiveness.

Required Experience

• Strong background in Cyber Security Assurance, Technology Risk, IT Audit, Security Testing or Cyber Risk Management.
• Experience leading assurance reviews within large, complex enterprise environments.
• Deep understanding of second-line assurance and control effectiveness assessment.
• Experience assessing technical controls across cloud, infrastructure, identity, networks and applications.
• Strong working knowledge of frameworks such as:
• ISO 27001
• NIST Cybersecurity Framework
• NIST 800-53
• CIS Controls
• MITRE ATT&CK
• Experience producing board-level reporting and translating technical findings into business risk.
• Excellent stakeholder management skills, with the ability to challenge constructively and influence senior leaders.

Desirable Experience

• Continuous Controls Monitoring (CCM) platforms.
• Automated assurance and evidence collection.
• PowerShell, Python or API-based automation.
• Cloud security assurance and modern identity controls.
• CISSP, CISM, CISA, CRISC, CCSP or ISO 27001 Lead Auditor certifications.