Enterprise InfoSec Governance & Assurance Lead

UKRI International; Swindon; Híbrido; GBP 42 000 - 51 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

An outstanding defined benefit pension

30 days’ annual leave

Employee discounts and offers

Employee assistance programme

Flexible working options

Resumo da oferta

UKRI seeks a seasoned information security governance lead to safeguard enterprise services across a federated research environment. You will establish and sustain an enterprise security assurance framework, provide independent challenge, and deliver an evidence-based view of risk to senior stakeholders.

The role requires deep knowledge of NIST CSF, ISO 27001 and the Government Cyber Assessment Framework, with the ability to drive consistent controls across service and supplier boundaries while

Qualificações

• Substantial experience leading information security governance, risk and assurance in a complex or federated organisation.
• Proven experience establishing enterprise security assurance frameworks across technology and supplier environments.
• Experience providing independent challenge to senior risk and control owners while preserving accountability.
• Experience assessing control design and effectiveness using technical, procedural and audit evidence.

Responsabilidades

• Be accountable for the effectiveness, coherence and continuing development of UKRI’s enterprise security governance, risk and assurance framework.
• Provide independent challenge and oversight of security risk, control design and control effectiveness, without assuming responsibility for operating the controls being assured.
• Set the enterprise assurance approach, standards and evidence expectations, aligned to organisational risk and recognised frameworks including NIST CSF, ISO 27001 and the Government Cyber Assessment Framework.
• Ensure assurance coverage is risk-based, proportionate and consistent across UKRI’s federated environment, while maintaining clear accountability with local service, risk and control owners.
• Hold authority to challenge risk and control owners, require proportionate remediation, track delivery to closure and elevate material concerns through the CIO, CISO and relevant governance forums.
• Provide an authoritative, evidence-based enterprise view of security risk, control effectiveness, assurance gaps and remediation status to support informed senior decision-making.
• Drive greater transparency, comparability and accountability through meaningful assurance measures, trend analysis and decision-quality reporting.

Conhecimentos

Information security governance

Risk management

Assurance frameworks

NIST CSF

ISO 27001

Government Cyber Assessment Framework

Descrição da oferta de emprego

UKRI seeks a seasoned information security governance lead to safeguard enterprise services across a federated research environment. You will establish and sustain an enterprise security assurance framework, provide independent challenge, and deliver an evidence-based view of risk to senior stakeholders.

The role requires deep knowledge of NIST CSF, ISO 27001 and the Government Cyber Assessment Framework, with the ability to drive consistent controls across service and supplier boundaries while