Intec Select
Director of Information Security - Assurance
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Director of Information Security - Assurance - £150k + 20% Bonus + LTIP - London/ Cambridge (hybrid) - Consultancy
Overview:
A market-leading consultancy organisation is seeking a Director of Information Security – Assurance to lead and develop a Security Assurance function within a global Digital Security environment.
This is a strategic leadership role responsible for building and maturing security assurance capabilities across control testing, audit readiness, governance, and risk management. The successful candidate will provide independent validation of security controls, ensuring organisations have clear visibility of security posture, control effectiveness, and remediation priorities.
This is a build-focused role, requiring a senior assurance leader who can establish scalable assurance frameworks, drive automation, influence executive stakeholders, and embed continuous improvement across complex technology environments.
Role & Responsibilities:
- Lead the development and maturity of the Security Assurance function, establishing frameworks, processes, governance structures, and operating models
- Design and manage a continuous controls assurance programme to independently assess the effectiveness of security controls across IT, cloud, and product environments
- Drive the evolution from periodic assurance reviews towards automated, data-driven, continuous control monitoring
- Oversee technical assurance activities including penetration testing, configuration reviews, security assessments, and control effectiveness testing
- Provide objective, evidence-based findings across complex digital estates, identifying control weaknesses, gaps, and areas of improvement
- Own security audit readiness activities, including coordination of external audits, certifications, evidence gathering, and auditor engagement
- Manage assurance findings through governance processes, ensuring remediation activity is tracked and reported effectively
- Partner with GRC, security, technology, and engineering teams to align assurance outcomes with enterprise risk management objectives
- Produce high-quality assurance reporting for senior leadership, translating technical findings into clear business risk insights
- Establish assurance metrics, reporting frameworks, and maturity roadmaps to improve security visibility and decision-making
- Drive automation and innovation across assurance testing and evidence collection processes to improve scalability
- Build, lead, and develop a high-performing Security Assurance team, creating a culture of analytical rigour, continuous improvement, and accountability
- Act as a trusted advisor to senior stakeholders, providing guidance on security posture, control effectiveness, and risk exposure
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Requirements:
- 10+ years’ experience in information security, cybersecurity assurance, audit, or governance roles
- 5+ years’ experience in senior security assurance, audit, or risk leadership roles focused on building capability and maturity
- Proven experience designing and implementing security assurance or controls testing programmes within complex, multi-stakeholder environments
- Strong expertise across security control frameworks, assurance methodologies, and audit practices including ISO 27001, SOC 2, NIST CSF, NIS2, and IEC 62443
- Strong technical understanding across IT security, cloud security, application security, and modern technology environments
- Experience leading external audit and certification programmes, including evidence management, auditor engagement, and remediation tracking
- Proven experience identifying control weaknesses and translating technical findings into actionable business risk insights
- Experience building and leading assurance, audit, or governance teams within international or enterprise environments
- Strong understanding of security governance models and the relationship between assurance, risk management, and compliance
- Experience driving automation, tooling improvements, and data-driven approaches to assurance and control monitoring
- Experience within technology, software, industrial software, critical infrastructure, or OT/ICS environments would be advantageous
- Familiarity with cloud security principles, DevSecOps, Agile delivery practices, and modern software development environments
- Experience applying AI and automation to security assurance, control testing, or evidence collection would be beneficial
- Relevant certifications such as CISSP, CISA, CISM, ISO 27001 Lead Auditor, or equivalent are desirable
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Salary & Package:
- Up to £150,000 Base Salary
- 20% Annual Bonus
- Long-Term Incentive Plan (LTIP)
- London/ Cambridge (hybrid)
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location