Security Risk Assurance Manager

Sanderson Government and Defence; Greater London; Hybrid; GBP 125,000 - 150,000; Full time

Job summary

A security services provider is looking for a Security Risk Assurance Manager to enhance enterprise security risk management. This position, offering hybrid working, involves evaluating security controls, supporting assurance activities, and collaborating within a multidisciplinary team. Candidates should have experience in information security or risk management, a strong commitment to detail, and relevant qualifications such as CISM or CISSP. Benefits include private health care and career development opportunities.

Benefits

Private Health Care

Cash Back Plan

Buy / Sell Holiday Options

Life Assurance

Qualifications

• Experience in information security, risk management, or assurance roles.
• Strong analytical skills with the ability to interpret technical and procedural evidence.
• Ability to work collaboratively within a multidisciplinary team.
• Familiarity with security frameworks and standards (e.g., ISO 27001, NIST, CIS Controls).

Responsibilities

• Conduct research to assess the effectiveness of security controls.
• Evaluate assurance data to support a holistic view of organizational security.
• Assist senior team members in drafting assurance reports.
• Support post-incident assurance activities and capture lessons learned.
• Contribute to the continuous improvement of assurance methodologies.

Skills

Information security

Risk management

Analytical skills

Team collaboration

Attention to detail

Education

CISM, CRISC, CISSP, CISA, CGEIT, ISO 27001 Lead Auditor

Job description

Security Risk Assurance Manager - SC cleared

Location: Hybrid (75% remote) with on-site presence as required

Contract Type: Permanent & Full-time

Salary: Competitive + Benefits

About the Role

The Security Assurance Manager supports the organisation's enterprise security risk management function by conducting assurance activities that evaluate the effectiveness of security controls across people, processes, and technology.

Working as part of a collaborative team that provides impartial assessments of security posture, evaluates supply chain security, and identifies enterprise-level risks. This role offers the opportunity to work across multiple assurance functions, including internal security assurance, supply chain risk, and strategic enterprise risk management.

Key Responsibilities

• Conduct research and gather evidence to assess the effectiveness of security controls.
• Evaluate and interpret assurance data to support a holistic view of organisational security.
• Record findings accurately using assurance tools and templates.
• Assist senior team members in testing controls and drafting assurance reports.
• Support post-incident assurance activities to ensure lessons learned are captured and improvements implemented.
• Contribute to continuous improvement of assurance methodologies and practices.
• Present findings to stakeholders and represent the assurance function in meetings and forums.
• Maintain awareness of current threats, vulnerabilities, and best practices in security assurance.

Experience Required

Experience in information security, risk management, or assurance roles.

Desirable Qualifications

• CISM, CRISC, CISSP, CISA, CGEIT, ISO 27001 Lead Auditor (or equivalent)

Required Clearance

Hold an active and transferable SC clearance.

Other Qualifications

Strong analytical skills with the ability to interpret technical and procedural evidence.

Ability to work collaboratively within a multidisciplinary team.

Familiarity with security frameworks and standards (e.g., ISO 27001, NIST, CIS Controls).

Attention to detail and commitment to producing high-quality documentation.

What's in it for You

Remote / Hybrid working.

Career Development

Continuous learning and professional growth.

Benefits Package

Includes Private Health Care, Cash Back Plan, Buy / Sell Holiday Options, Life Assurance, and more.

Reasonable Adjustments

Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built, and we welcome applications from people of all backgrounds and perspectives. Our success is driven by our people, united by the spirit of partnership to deliver the best resourcing solutions for our clients.

If you need any help or adjustments during the recruitment process for any reason, please let us know when you apply or talk to the recruiters directly so we can support you.