Cyber Assurance Lead - 3 Month Initial Contract - Hybrid in London - Inside IR35

Cyber Assurance Lead - 3 Month Initial Contract - Hybrid in London - Inside IR35

Role Overview

An experienced Cyber Assurance Lead operating within a regulated IT infrastructure environment. The position is responsible for owning cyber assurance across the complete system life cycle - from security control definition and implementation through to audit, compliance review, and risk management. BPSS clearance is mandatory prior to contract commencement, and the role requires CISSP, CISM, or equivalent certification.

Key Responsibilities

• Verify that cyber security controls have been implemented in accordance with risk management plans, including assessments of threats and vulnerabilities across the environment.
• Plan and lead formal cyber security audits, producing detailed written reports and oral briefings on findings for both technical and non-technical audiences.
• Assure the implementation, operation, and ongoing maintenance of security controls, providing expert advisory on audit, assurance, and risk management.
• Review compliance with legal and regulatory requirements, assessing the accuracy of cyber security risk assessments and risk management plans against business objectives.
• Engage and influence stakeholders across cyber security and business functions, driving understanding and buy-in for audit findings, assurance activities, and mitigation actions.

Top 5 Skills

• Cyber assurance & audit expertise - Proven track record leading cyber security audits and assurance activities within regulated environments, with hands-on experience implementing and managing cyber security risk management plans.
• Security frameworks & standards - Strong knowledge of formal security standards such as ISO 27001 and COBIT 5, alongside legal and regulatory requirements covering data protection, privacy, and export control.
• Azure & security technologies - Practical experience working within Azure cloud environments, with knowledge across identity management, networking, Windows security controls, Firewall technologies, and vulnerability management.
• Security hardening & testing - Experience in security hardening, penetration testing concepts, and adversarial behaviour analysis, with the ability to use appropriate auditing tools to conduct efficient and effective assessments.
• Professional certifications - CISSP or CISM (or equivalent) is essential; Lead Security Auditor and Certified Ethical Hacker (CEH) certifications are strongly preferred.

Contract Details

• Rate: £500 per day Inside IR35
• Location: Hybrid (3 days On Site) in London
• Contract Length: An initial 3 Month Contract