Information Security Assurance Manager

TalentHawk; England; On-site; GBP 60,000 - 80,000; Full time

Job summary

A leading company in energy delivery is seeking an Information Security Assurance Manager to ensure security governance and control effectiveness across complex environments. You will manage security risk registers, support audits, and produce executive reports on security posture. The ideal candidate has a strong background in information security assurance, experience in regulated environments, and familiarity with ISO 27001 and NIST frameworks. This is a contract position at mid-senior level based in the United Kingdom.

Qualifications

• Strong background in Information Security Assurance and Governance.
• Experience in regulated environments, aligning controls to frameworks.
• Familiarity with internal/external audits and audit readiness.

Responsibilities

• Deliver security assurance across cyber, IT, cloud, and third parties.
• Assure controls aligned to ISO 27001, NIST, and SOC2.
• Maintain a security risk register and track remediation actions.

Skills

Information Security Assurance

Governance

Risk Management

Compliance

Tools

Security frameworks

IAM/PAM

Vulnerability Management

ISO 27001

NIST

Job description

Our client are leading the way in energy delivery and are seeking an Information Security Assurance Manager with experience delivering security assurance, governance, and control effectiveness across complex, regulated environments. Strong background in assessing and assuring information security controls aligned to recognised frameworks including ISO 27001 and NIST.

Experienced in supporting internal and external audits, managing security risk registers, tracking remediation actions, and providing clear, executive-level reporting on security posture and risk. Comfortable working across cyber, IT, cloud, and third-party environments, partnering with technology, risk, and compliance teams to ensure secure and compliant operations.

Key Responsibilities

• Deliver security assurance across cyber, IT, cloud, and third parties
• Assure controls aligned to ISO 27001, NIST, SOC2
• Own audit readiness and support internal/external audits
• Maintain security risk register and track remediation actions
• Provide assurance over IAM/PAM, vulnerability management, data protection
• Produce clear executive-level security reporting
• Work closely with Cyber, Risk, IT, and Compliance teams

Key Skills & Experience

• Strong background in Information Security Assurance / GRC
• Experience in regulated environments
• Knowledge of security frameworks and controls
• Familiarity with security tooling and assurance processes

Seniority level

Mid‑Senior level

Employment type

Contract

Job function

Information Technology

Industries

Computer and Network Security