Information Security Assurance Manager

Our client are leading the way in energy delivery and are seeking an Information Security Assurance Manager with experience delivering security assurance, governance, and control effectiveness across complex, regulated environments. Strong background in assessing and assuring information security controls aligned to recognised frameworks including ISO 27001 and NIST.

Experienced in supporting internal and external audits, managing security risk registers, tracking remediation actions, and providing clear, executive-level reporting on security posture and risk. Comfortable working across cyber, IT, cloud, and third-party environments, partnering with technology, risk, and compliance teams to ensure secure and compliant operations.

Key Responsibilities

• Deliver security assurance across cyber, IT, cloud, and third parties
• Assure controls aligned to ISO 27001, NIST, SOC2
• Own audit readiness and support internal/external audits
• Maintain security risk register and track remediation actions
• Provide assurance over IAM/PAM, vulnerability management, data protection
• Produce clear executive-level security reporting
• Work closely with Cyber, Risk, IT, and Compliance teams

Key Skills & Experience

• Strong background in Information Security Assurance / GRC
• Experience in regulated environments
• Knowledge of security frameworks and controls
• Stakeholder management at senior level
• Familiarity with security tooling and assurance processes