Remote Cyber Security Controls Tester — Assurance Expert

Sanderson Government & Defence; City Of London; On-site; GBP 140,000 - 160,000; Full time

Job summary

Sanderson Government & Defence is seeking a Cyber Security Controls Tester to support a large-scale security assurance programme. The role is fully remote in the UK with an initial 6-month contract and a day rate of around £550 (Outside IR35).

Active SC clearance is required and you will work with security architects, risk teams and stakeholders to evaluate controls against ISO 27001, NIST CSF, NIST 800-53, and CIS Controls.

Qualifications

• Proven experience testing security controls in complex enterprise environments.
• Knowledge of ISO 27001, NIST CSF, NIST 800-53 and CIS Controls.
• Experience with network security controls, IAM, encryption, and endpoint security.
• Familiarity with HLD/LLD documentation and control catalogs.
• Understanding of GDPR/PCI and ICO requirements.

Responsibilities

• Evaluate security controls against requirements and standards.
• Review designs, policies, and controls catalogs for compliance.
• Assess network, firewall, IAM and encryption controls.
• Develop test plans, execute testing, and document results.
• Produce actionable assurance reports and remediation guidance.
• Collaborate with architects, risk teams and stakeholders.

Skills

Security controls testing

ISO 27001

NIST CSF

NIST 800-53

CIS Controls

IAM

Encryption

Endpoint security

HLD/LLD reviews

Regulatory awareness

Job description

Sanderson Government & Defence is seeking a Cyber Security Controls Tester to support a large-scale security assurance programme. The role is fully remote in the UK with an initial 6-month contract and a day rate of around £550 (Outside IR35).

Active SC clearance is required and you will work with security architects, risk teams and stakeholders to evaluate controls against ISO 27001, NIST CSF, NIST 800-53, and CIS Controls.