Webologix Ltd/ INC
Cyber Assurance Lead
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
The Role
The Cyber Assurance Lead reports to the Head of IT Operations / IT Operations Manager. Cyber assurance is an umbrella term for several processes aimed at ensuring individual system components can adequately protect themselves from attacks. Doing so requires not just a one-time effort but spans the complete system lifecycle in a changing environment as security posture may evolve over time adapting to emerging threats or changing systems utilisation. The Cyber Assurance Lead role holder is responsible to ensure that assurance is carried out professionally fulfils its role as last line of defense. They will oversee cyber security controls implementation, from definition in line with risks assessments to operation and maintenance. The Cyber Assurance Lead post holder will conduct assessments and audits, sharing findings and mitigations actions with the relevant stakeholders and teams.
Framework & Boundaries
The role holder is given Cyber Assurance service ownership by the Head of IT Operations / IT Operations Manager. The boundaries of the role are defined by the Customer's Digital & IT governance framework, including policies and procedures related to information security, data management, technology procurement, and project delivery. The Cyber Assurance Lead operates within these boundaries to ensure compliance with regulatory requirements, organisational standards, and industry best practices.
Your Responsibilities
- Verifying that the specified cyber security controls have been implemented in accordance with the risk management plan, including assessments of threats and vulnerabilities.
- Produce detailed plans for cyber security audits.
- Assure the implementation, operation, and maintenance of security controls.
- Write formal reports, and where required deliver oral briefings, on the findings of audits and compliance reviews.
- Present results clearly so that both technical staff and management understand the key findings.
- Present audit findings to colleagues and managers across both cyber security and business functions.
- Assess the accuracy of cyber security risk assessments and risk management plans, taking into account the organisation's business objectives.
- Review compliance with legal and regulatory requirements.
- Provide expert advice on audit, assurance, and risk management.
- Use appropriate auditing tools to conduct effective and efficient assessments.
- Convince stakeholders of the importance of audit, assurance, and security.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Your Profile
Knowledge & Skills
- Formal method or standards, such as COBIT 5 or ISO27001 and associated best practices.
- Legal and regulatory standards on data protection and privacy.
- Knowledge across a range of Security technologies: Azure identity management and networking, Windows security controls and firewall technologies.
- Security Hardening and Testing.
- Vulnerability Management.
- Cyber Security Risk Management and Governance in line with Law and Regulations (incl. SNI and export control).
- Knowledge on Privacy and Online Rights.
- Familiar with Adversarial Behaviours.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Qualifications & Experience
- Proven track record of conducting Cyber Security Risk Assessments within a regulated environment.
- Experience in implementing and managing Cyber Security Risk Management Plans.
- Previous experience leading Cyber Assurance audits and overseeing mitigation actions and security control implementation.
- Experience working within Azure Cloud environments.
- CISSP / CISM (or equivalent certification).
- Lead Security Auditor certification.
- Certified Ethical Hacker (CEH) certification.
Key Competencies
- Able to evaluate the probable social, commercial, cultural, ethical and environmental consequences of an action.
- Great attention to details and methodical.
- Able to be flexible and work analytically in a problem-solving environment, with attention to detail and a commitment to quality.
- Able to plan ahead, identify critical business issues and works in a systematic way.
Behavioural Competencies
- Willing to develop self and others through formal and informal learning opportunities.
- Strong communication, influencing, negotiation, presentation, and stakeholder management skills.
- Ability to build effective relationships with stakeholders at all levels of the organisation.
- Demonstrates ownership, accountability, and a commitment to delivering high-quality outcomes.
- Ability to understand business and customer needs, build trust, and deliver effective solutions.
- Acts as a role model for organisational values, behaviours, and professional standards.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location