Senior Controls Assurance Officer

UK Shared Business Services Ltd (UKSBS); Swindon; On-site; GBP 60,000 - 85,000; Full time

Job summary

UK Shared Business Services Ltd (UKSBS) in Swindon is seeking an experienced Senior Assurance Officer to join the Risk & Assurance team. You will provide independent, risk-based assurance across controls, governance and security frameworks to ensure resilience and compliance.

You will plan and lead reviews, evaluate design and operating effectiveness of key controls, and report findings with practical remediation actions to senior stakeholders.

Qualifications

• Experience in risk-based assurance, internal audit, or security assurance.
• Plan, conduct and report end-to-end assurance reviews.
• Strong knowledge of risk management, governance and controls.
• Excellent stakeholder engagement and clear, objective reporting.

Responsibilities

• Plan and lead independent, risk-based assurance reviews across UKSBS services, systems, programmes, and control environments.
• Evaluate the design and operating effectiveness of key business, technical, and security controls, applying professional scepticism to reach robust conclusions.
• Undertake reviews against relevant government and industry security frameworks, including GovAssure, ISO 27001, and NCSC CAF.
• Produce concise, high-quality assurance reports that clearly articulate scope, findings, root causes, risk exposure, and practical recommendations.
• Collaborate with management to agree remediation actions and monitor progress.

Skills

Risk-based assurance

Internal audit

Governance

Control evaluation

Stakeholder engagement

Analytical thinking

Education

CIA/CMIIA/CCAB/IRM/CISA

Job description

It's an exciting time to join UKSBS as we transform our business to be the leading UK public sector business service provider. We aim to become a very different organisation over the next few years as we move to a modern multi-platform, digitally enabled organisation.

We are now seeking an experienced Senior Assurance Officer to join our Risk & Assurance team. Operating within our second-line assurance function, you will play a vital role in providing independent, risk-based assurance across UKSBS controls, processes, governance, and security frameworks to ensure our services remain resilient, compliant, and continuously improving.

Duties will include, but are not limited to the following:

• Plan and lead independent, risk-based assurance reviews across UKSBS services, systems, programmes, and control environments.
• Evaluate the design and operating effectiveness of key business, technical, and security controls, applying professional scepticism to reach robust conclusions.
• Undertake reviews against relevant government and industry security frameworks, including GovAssure, ISO 27001, and NCSC CAF.
• Produce concise, high-quality assurance reports that clearly articulate scope, findings, root causes, risk exposure, and practical recommendations.
• Collaborate constructively with management and stakeholders to agree proportionate remediation actions, monitoring and reporting on progress.
• Contribute to the continuous improvement of UKSBS assurance methodologies, control frameworks, and reporting standards.

To do this role well you will need:

• Significant experience in risk-based assurance, internal audit, controls evaluation, compliance, or security assurance.
• Proven ability to plan, conduct, and deliver end-to-end reviews from scoping and testing through to reporting and action tracking.
• Strong understanding of risk management, governance, internal control frameworks, and recognised assurance principles.
• Excellent analytical and professional judgement skills, with the ability to identify root causes and evaluate control weaknesses.
• First-class communication and stakeholder engagement skills, with confidence providing objective challenge and reporting to senior audiences.

The following would be advantageous but are not essential:

• A recognised professional qualification (or working towards one) such as CIA, CMIIA, CCAB, IRM, CISA, or ISO 27001 Lead Auditor/Implementer.
• Experience working with government or security assurance frameworks such as GovAssure or NCSC CAF.
• Experience gained within a shared services, public sector, or regulated technology-enabled environment.

We are an inclusive and Disability Confident employer and welcome all applications.

Successful candidates may be required to undergo Security Clearance (National Security Vetting) as part of their employment. To meet these standards, applicants must normally have lived in the UK for at least the last five years and be able to satisfy background, identity and criminal record checks.

We are UKSBS. We are creating a place where people love to work, a culture where we lead, we change, we deliver and we empower our people to be curious, take action and add value.