Security Assurance Lead

Hire Top Talent; Cambridge; Hybrid; GBP 55,000 - 73,000; Full time

Benefits offered by this job

28 days annual leave plus bank holiday

Private medical insurance

Permanent Health Insurance

Discretionary annual bonus

Group personal pension scheme

Life assurance of up to 4x annual sau

Green travel schemes

Flexible and family‑friendly benefits

Job summary

Hire Top Talent in Cambridge offers a Hybrid Security Assurance Lead role focused on strengthening information security, managing cyber risk, and improving assurance across a complex tech environment.

You will work with technology, security, and business teams to identify risks, improve controls, support compliance, and promote secure ways of working. The role requires 5+ years in security testing or assurance and relevant certifications.

Qualifications

• 5+ years of experience in security testing, security assurance, or related information security role.
• Degree in Computer Science, Information Security, or equivalent professional experience.
• CISSP or recognized security testing qualification.
• Proven experience managing information security risks and mitigations within medium to large organisations.
• Strong knowledge of security testing, vulnerability management, and assurance practices.
• Experience working with multiple stakeholders and influencing decision‑making at different levels.
• Excellent communication, presentation, and stakeholder management skills.
• Strong analytical and problem‑solving abilities.
• Ability to manage multiple projects and priorities independently.
• Proactive and self‑motivated approach to security and risk management.

Responsibilities

• Lead security assurance activities covering attack surface management, vulnerability management, penetration testing, and security posture improvement.
• Identify, assess, prioritise, and remediate vulnerabilities across applications, infrastructure, cloud services, and systems.
• Develop and maintain security policies, standards, procedures, and guidance.
• Support security risk assessments, supplier security reviews, and risk register management.
• Contribute to security governance, compliance, and external assessments, including alignment with ISO 27001 and NIST frameworks.
• Analyse threat intelligence, security testing results, and assurance data to identify priorities.
• Provide clear security risk reporting and recommendations to senior stakeholders.
• Support incident preparedness, investigations, and security exercises.
• Monitor emerging cyber threats and identify opportunities to strengthen security through automation and new technologies.
• Contribute to the development and delivery of the wider security strategy.

Skills

Security testing

Risk management

Compliance frameworks

Stakeholder management

Communication

Analytical thinking

Project management

Proactive security mindset

Education

Degree in Computer Science or Information Security

CISSP certification

Tools

Tenable

Microsoft Copilot

Claude

Job description

Location: Cambridge / Hybrid – minimum 2 days per week in the office

Contract: Permanent

Hours: 35 hours per week

About the Role

Security Assurance Lead

Salary: £54,800 – £73,250

Location: Cambridge / Hybrid – minimum 2 days per week in the office

Contract: Permanent

Hours: 35 hours per week

About the Role

We are looking for an experienced Security Assurance Lead to play a key role in strengthening information security, managing cyber risk, and improving security assurance across a complex technology environment.

This is an influential and varied position, working closely with technology, security, and business teams to identify risks, improve controls, support compliance, and promote secure ways of working.

Key Responsibilities

• Lead security assurance activities covering attack surface management, vulnerability management, penetration testing, and security posture improvement.
• Work with technology and security teams to identify, assess, prioritise, and remediate vulnerabilities across applications, infrastructure, cloud services, and systems.
• Develop and maintain security policies, standards, procedures, and guidance.
• Support security risk assessments, supplier security reviews, and risk register management.
• Contribute to security governance, compliance, and external assessments, including alignment with ISO 27001 and NIST frameworks.
• Analyse threat intelligence, security testing results, and assurance data to identify priorities and improve organisational resilience.
• Provide clear security risk reporting and recommendations to senior stakeholders.
• Support incident preparedness, investigations, and security exercises.
• Monitor emerging cyber threats and identify opportunities to strengthen security through automation and new technologies.
• Contribute to the development and delivery of the wider security strategy.

About You

You will have 5+ years of experience in security testing, security assurance, or a closely related information security role, together with a strong understanding of security principles, cyber threats, risk management, and compliance frameworks.

You should have:

• A degree in Computer Science, Information Security, or equivalent professional experience.
• Relevant professional certifications such as CISSP and/or recognised security testing qualifications.
• Proven experience managing information security risks and developing effective mitigations within medium to large organisations.
• Strong knowledge of security testing, vulnerability management, and assurance practices.
• Experience working with multiple stakeholders and influencing decision‑making at different levels.
• Excellent communication, presentation, and stakeholder management skills.
• Strong analytical and problem‑solving abilities.
• The ability to manage multiple projects and priorities independently.
• A proactive and self‑motivated approach to security and risk management.

Desirable Experience

The following experience would be advantageous:

• Developing and maintaining a supply chain/security risk register within a medium to large organisation.
• Hands‑on experience with AI applications and tools such as Microsoft Copilot, Claude, or similar technologies.
• Experience using penetration testing and vulnerability management platforms such as Tenable within complex technology environments.
• Experience presenting and reporting security risks, vulnerabilities, and mitigation plans to senior leadership.
• Experience contributing to security strategy, governance, and continuous improvement programmes.

Working Arrangements

This is a hybrid role, with the successful candidate expected to spend approximately 40–60% of their working time collaborating with colleagues in person at the designated office location.

Flexible working arrangements may also be considered, including reasonable adjustments for candidates with disabilities or long‑term health conditions.

Benefits

The role offers a competitive salary and a comprehensive benefits package, including:

• 28 days annual leave plus bank holidays
• Private medical insurance
• Permanent Health Insurance
• Discretionary annual bonus
• Group personal pension scheme
• Life assurance of up to 4x annual salary
• Green travel schemes
• Flexible and family‑friendly benefits

Recruitment Process

The recruitment process is expected to include:

• Three role‑related application questions requiring brief responses.
• A 15-minute screening call with the Hiring Manager.
• First-stage virtual interview via Microsoft Teams.
• Final-stage in-person interview.

The application closing date is 2 September. Applications will be reviewed on an ongoing basis, with interviews expected to take place shortly after shortlisting.

Successful candidates will be subject to satisfactory background checks, including DBS checks where applicable.

Reasonable adjustments can be requested throughout the recruitment process.

Equal Opportunities

We are committed to providing an inclusive and equitable recruitment process. Applications are welcomed from candidates of all backgrounds, experiences, and communities.

We believe that diversity of thought, background, and experience contributes to better outcomes and are committed to creating an environment where everyone can develop, contribute, and build a successful career.