Technical Assurance Manager

LT Harper Recruitment Group; Greater London; Hybrid; GBP 85,000 - 100,000; Full time

Job summary

LT Harper Group in London is seeking a Technical Assurance Manager, Cyber Security to lead second-line assurance across the group. This greenfield security transformation role reports into Group Cyber Security and involves ownership of assurance over controls, evidence, and risk reduction.

You will build risk-based assurance plans, oversee the CCM platform, manage analysts, and collaborate with BISOs and senior leaders across UK and international sites, with hybrid work and international travel.

Qualifications

• Extensive experience in technical assurance, IT audit or technology risk.
• Experience leading control testing in a large federated organization.
• Ability design control tests and assess design and operating effectiveness from evidence.
• Confident advising senior stakeholders across geographies.

Responsibilities

• Build and run a risk-based assurance plan across infrastructure, cloud, applications, identity, vulnerability management, incident response and data security.
• Oversee configuration of the group’s CCM platform and expand automated evidence collection.
• Maintain the control test library and approve the scope, approach and findings of every review.
• Run the self-attestation cycle and validate divisional evidence for onboarding with the programme.
• Agree proportionate responses to findings with BISOs and track issues to closure.
• Turn technical findings into board-level reporting, metrics and dashboards showing control effectiveness.

Skills

Technical assurance

IT audit

Security testing

Technology risk

Control testing

Stakeholder influence

Tools

Continuous Controls Monitoring (CCM)

BI dashboards

Job description

Technical Assurance Manager, Cyber Security

London, hybrid | £85,000 to £100,000 plus benefits

This is a greenfield role within a security transformation programme at a FTSE 100 multinational group with a federated, international structure. You’ll own second-line assurance over Cyber Security controls across the group. You’ll prove, with evidence, whether controls are designed well and working, and make that assurance more automated and data-led.

The essentials

• £85,000 to £100,000 plus benefits
• London, hybrid with 2 to 3 days a week in the office, plus UK and international travel for onsite reviews
• Line management of two Technical Assurance Analysts

What you’ll actually do

• Build and run a risk-based assurance plan across infrastructure, cloud, applications, identity, vulnerability management, incident response and data security
• Oversee configuration of the group’s Continuous Controls Monitoring (CCM) platform and expand automated evidence collection
• Maintain the control test library and approve the scope, approach and findings of every review
• Run the six-monthly or annual self-attestation cycle, validate divisional evidence and bring acquired businesses into the programme
• Agree proportionate responses to findings with Business Information Security Officers (BISOs), and track significant issues to closure or formal risk acceptance
• Turn technical findings into board-level reporting, metrics and dashboards that show control effectiveness and risk reduction

What you’ll need

• Substantial experience in technical assurance, IT audit, security testing or technology risk
• Experience leading control testing or assurance in a large, complex or federated organisation, including coaching analysts
• Experience designing control tests and judging design and operating effectiveness from technical evidence
• Confidence advising and challenging senior stakeholders across business units and geographies

Nice to have

• Automated control testing, continuous assurance, or BI and dashboard tools
• Assurance of cloud, modern identity or third-party suppliers
• CISA or ISO 27001 Lead Auditor certification (equivalent experience counts)

What’s in it for you

• A greenfield function: you’ll set the methods, test library and reporting rather than inherit them
• Plenty of scope to make your mark as part of a wider security transformation
• Ownership of Control Assurance and Control Effectiveness for the whole group, and the chance to shape how it automates
• Regular exposure to Group Cyber Security leadership and divisional leaders

If you meet most but not all of the essentials, we’d still like to hear from you. If you need any adjustments during the application process, tell us and we’ll make them.