Senior Controls Assurance Lead - Risk & Security

UK Shared Business Services Ltd (UKSBS); Swindon; On-site; GBP 60,000 - 85,000; Full time

Job summary

UK Shared Business Services Ltd (UKSBS) in Swindon is seeking an experienced Senior Assurance Officer to join the Risk & Assurance team. You will provide independent, risk-based assurance across controls, governance and security frameworks to ensure resilience and compliance.

You will plan and lead reviews, evaluate design and operating effectiveness of key controls, and report findings with practical remediation actions to senior stakeholders.

Qualifications

• Experience in risk-based assurance, internal audit, or security assurance.
• Plan, conduct and report end-to-end assurance reviews.
• Strong knowledge of risk management, governance and controls.
• Excellent stakeholder engagement and clear, objective reporting.

Responsibilities

• Plan and lead independent, risk-based assurance reviews across UKSBS services, systems, programmes, and control environments.
• Evaluate the design and operating effectiveness of key business, technical, and security controls, applying professional scepticism to reach robust conclusions.
• Undertake reviews against relevant government and industry security frameworks, including GovAssure, ISO 27001, and NCSC CAF.
• Produce concise, high-quality assurance reports that clearly articulate scope, findings, root causes, risk exposure, and practical recommendations.
• Collaborate with management to agree remediation actions and monitor progress.

Skills

Risk-based assurance

Internal audit

Governance

Control evaluation

Stakeholder engagement

Analytical thinking

Education

CIA/CMIIA/CCAB/IRM/CISA

Job description

UK Shared Business Services Ltd (UKSBS) in Swindon is seeking an experienced Senior Assurance Officer to join the Risk & Assurance team. You will provide independent, risk-based assurance across controls, governance and security frameworks to ensure resilience and compliance.

You will plan and lead reviews, evaluate design and operating effectiveness of key controls, and report findings with practical remediation actions to senior stakeholders.