Senior Cyber Security Assurance Lead

The Lancashire Group; City Of London; On-site; GBP 90,000 - 120,000; Full time

Job summary

The Lancashire Group is seeking a Principal Cyber Security Analyst to lead the information security function, focusing on technical assurance, risk management and control validations in London. You will act as the SME across IT, cloud and third‑party environments and work with the SOC to strengthen monitoring and incident response capabilities.

You will mentor team members, drive assurance activities, and ensure compliance with regulatory requirements (FCA, PRA, NYDFS or equivalent).

Qualifications

• Senior or specialist level information security experience.
• Hands-on cyber risk management and control assessment experience.
• Technical security assurance across infrastructure, applications and cloud.
• Strong working knowledge of frameworks such as NIST CSF and ISO 27001.
• Experience supporting regulatory compliance obligations (e.g. FCA, PRA, NYDFS or equivalent).
• Experience supporting audit activities and remediation tracking.
• Experience in third-party risk and supplier assurance processes.
• Ability to interpret and apply technical security controls in practical environments.
• Experience mentoring team members in technical and assurance activities.
• Strong analytical, organisational and stakeholder communication skills.

Responsibilities

• Lead and deliver ISMS improvements, aligning with NIST CSF, NYDFS, ISO 27001.
• Translate strategy into operational assurance activities with governance and reporting.
• Own cyber risk management including risk register and remediation oversight.
• Drive cyber risk and control assessments across business operations and third parties.
• Deliver technical assurance activities: testing, validation and evidence gathering.
• Coordinate responses to audit findings and remediation actions.
• Support regulatory reporting with documentation and evidence of compliance.
• Act as SME across IT infrastructure, applications, cloud and third‑party environments.
• Provide governance input in forums (e.g. CAB) on security implications of changes.
• Assess onboarding of new systems to ensure security standards are met.
• Develop threat modelling and secure design practices.
• Support third‑party security assurance activities as required.
• Assist cyber security incidents with technical analysis and containment.
• Collaborate with SOC to strengthen monitoring and response controls.
• Share knowledge to develop the team.

Skills

Cyber risk mgmt

Security assurance

NIST CSF

ISO 27001

Regulatory compliance

Audit remediation

Third-party risk

Cloud security

Threat modelling

Incident response

Mentoring

Stakeholder comms

Job description

The Lancashire Group is seeking a Principal Cyber Security Analyst to lead the information security function, focusing on technical assurance, risk management and control validations in London. You will act as the SME across IT, cloud and third‑party environments and work with the SOC to strengthen monitoring and incident response capabilities.

You will mentor team members, drive assurance activities, and ensure compliance with regulatory requirements (FCA, PRA, NYDFS or equivalent).