Senior Assurance & Risk Officer: Security & Compliance

UK SBS Ltd; Swindon; On-site; GBP 45,000 - 62,000; Full time

Job summary

UKSBS is seeking a Senior Assurance Officer to join the Risk & Assurance team in Swindon, Newport, or Stockton-on-Tees. You will lead independent, risk-based assurance reviews across services, systems and programs, evaluating key controls against GovAssure, ISO 27001 and NCSC CAF frameworks.

The role focuses on producing concise reports, identifying root causes, and proposing practical remediation actions, while continuously improving assurance methodologies and reporting standards within the

Qualifications

• Experience in risk-based assurance, internal audit, or security assurance.
• Ability to plan, conduct and report end-to-end reviews.
• Strong understanding of risk management and governance.
• Excellent analytical and judgement skills.

Responsibilities

• Plan and lead independent, risk-based assurance reviews across UKSBS services, systems, programmes, and control environments.
• Evaluate the design and operating effectiveness of key business, technical, and security controls, applying professional scepticism to reach robust conclusions.
• Undertake reviews against GovAssure, ISO 27001, and NCSC CAF frameworks.
• Produce concise assurance reports that articulate scope, findings, root causes, risk exposure, and recommendations.
• Collaborate with management to agree remediation actions and monitor progress.
• Contribute to continuous improvement of assurance methodologies and reporting standards.

Skills

Risk-based assurance

Internal audit

Controls evaluation

Governance

Security assurance

Analytical skills

Stakeholder engagement

Reporting

Communication

Job description

UKSBS is seeking a Senior Assurance Officer to join the Risk & Assurance team in Swindon, Newport, or Stockton-on-Tees. You will lead independent, risk-based assurance reviews across services, systems and programs, evaluating key controls against GovAssure, ISO 27001 and NCSC CAF frameworks.

The role focuses on producing concise reports, identifying root causes, and proposing practical remediation actions, while continuously improving assurance methodologies and reporting standards within the