Lead Security Control Assessor

JR United Kingdom; Crawley; Remote; GBP 60,000 - 80,000; Full time

Job summary

Une entreprise de sécurité recherche un Lead Security Control Assessor pour rejoindre son équipe à distance. Le candidat assurera l'évaluation des contrôles de sécurité dans des environnements cloud et on-premise, en fournissant des recommandations sur l'amélioration des contrôles suivant les normes. Si vous avez plus de 8 ans d'expérience avec au moins 3 ans dans un rôle de leadership, ce contrat de 9 mois est fait pour vous.

Qualifications

• 8+ ans d'expérience en audit IT ou évaluations de contrôles de sécurité.
• 3+ ans dans un rôle de leader ou de gestion.
• Expérience démontrée d'évaluation des contrôles de sécurité dans des environnements cloud (AWS et Azure).

Responsibilities

• Diriger la conception et la livraison de méthodologies pour le test des contrôles.
• Gérer l'exécution du testing des contrôles et identifier les lacunes.
• Produire des rapports de haute qualité avec des recommandations.

Skills

IT audit

Information security control assessments

Security controls in cloud environments

Strong communication skills

Automated and manual testing techniques

Agile methodology

Education

CISA

CISM

CISSP

ISO 27001 Lead Auditor

Tools

SailPoint

Rapid7

Wiz.io

Microsoft Defender

RSA Archer

ServiceNow

Excel

Tableau

Alteryx

PowerBI

Jira

Job description

Lead Security Control Assessor, crawley, west sussex

Client:

Location:

crawley, west sussex, United Kingdom

Job Category:

Other

-

EU work permit required:

Yes

Job Views:

7

Posted:

26.06.2025

Expiry Date:

10.08.2025

Job Description:

Lead Security Control Assessor – Fully Remote - Contract £500 inside IR35 – 9 months – potentially extended

The Opportunity

We’re supporting our client in the search for a Lead Security Control Assessor to join their remote information security team on a long-term contract. In this role, you'll lead the evaluation and assurance of security controls across cloud and on-premise environments, ensuring compliance with internal policies and industry standards. This is a hands-on leadership role, offering the chance to shape the quality and impact of a key assurance programme.

Key Responsibilities

• Lead the design and delivery of scalable, repeatable methodologies for control testing, including automation in cloud environments
• Plan and manage the execution of control testing – including risk identification, sampling, fieldwork, and reporting
• Guide a team of assessors through testing activities and documentation reviews.
• Identify control gaps, assess associated risks, and produce high-quality reports with actionable insights
• Act as the primary stakeholder interface for control testing engagements, ensuring progress updates and clear communication
• Contribute to ongoing improvements in the assurance programme by standardising materials and defining measurable KPIs

Skills & Experience Required

• 8+ years of experience in IT audit or information security control assessments, with 3+ years in a lead or managerial role
• Demonstrated experience assessing security controls in cloud environments (AWS and Azure)
• Strong understanding of key frameworks and standards, including NIST 800-53, ISO 27001, CIS Controls, and COBIT
• Professional certifications such as CISA, CISM, CISSP, or ISO 27001 Lead Auditor
• Strong communication skills with the ability to translate technical findings into business language
• Proficient in both automated and manual testing techniques for security controls
• Experience with tools such as SailPoint, Rapid7, Wiz.io, Microsoft Defender, RSA Archer, and ServiceNow
• Familiarity with automation and data analytics tools (Excel, Tableau, Alteryx, PowerBI)
• Agile methodology experience, ideally with Jira and Kanban boards
• Background in a Big 4 consultancy or similar high-compliance environment

Please note that if you are NOT a passport holder of the country for the vacancy you might need a work permit. Check our Blog for more information.

Bank or payment details should not be provided when applying for a job. Eurojobs.com is not responsible for any external website content. All applications should be made via the 'Apply now' button.

Created on 26/06/2025 by JR United Kingdom