Hire Top Talent
Security Assurance Lead
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Security Assurance Lead
Salary: £54,800 – £73,250
Location: Cambridge / Hybrid – minimum 2 days per week in the office
Contract: Permanent
Hours: 35 hours per week
About the Role
We are looking for an experienced Security Assurance Lead to play a key role in strengthening information security, managing cyber risk, and improving security assurance across a complex technology environment.
This is an influential and varied position, working closely with technology, security, and business teams to identify risks, improve controls, support compliance, and promote secure ways of working.
Key Responsibilities
- Lead security assurance activities covering attack surface management, vulnerability management, penetration testing, and security posture improvement.
- Work with technology and security teams to identify, assess, prioritise, and remediate vulnerabilities across applications, infrastructure, cloud services, and systems.
- Develop and maintain security policies, standards, procedures, and guidance.
- Support security risk assessments, supplier security reviews, and risk register management.
- Contribute to security governance, compliance, and external assessments, including alignment with ISO 27001 and NIST frameworks.
- Analyse threat intelligence, security testing results, and assurance data to identify priorities and improve organisational resilience.
- Provide clear security risk reporting and recommendations to senior stakeholders.
- Support incident preparedness, investigations, and security exercises.
- Monitor emerging cyber threats and identify opportunities to strengthen security through automation and new technologies.
- Contribute to the development and delivery of the wider security strategy.
About You
You will have 5+ years of experience in security testing, security assurance, or a closely related information security role, together with a strong understanding of security principles, cyber threats, risk management, and compliance frameworks.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
You should have:
- A degree in Computer Science, Information Security, or equivalent professional experience.
- Relevant professional certifications such as CISSP and/or recognised security testing qualifications.
- Proven experience managing information security risks and developing effective mitigations within medium to large organisations.
- Strong knowledge of security testing, vulnerability management, and assurance practices.
- Experience working with multiple stakeholders and influencing decision-making at different levels.
- Excellent communication, presentation, and stakeholder management skills.
- Strong analytical and problem-solving abilities.
- The ability to manage multiple projects and priorities independently.
- A proactive and self-motivated approach to security and risk management.
Desirable Experience
The following experience would be advantageous:
- Developing and maintaining a supply chain/security risk register within a medium to large organisation.
- Hands-on experience with AI applications and tools such as Microsoft Copilot, Claude, or similar technologies.
- Experience using penetration testing and vulnerability management platforms such as Tenable within complex technology environments.
- Experience presenting and reporting security risks, vulnerabilities, and mitigation plans to senior leadership.
- Experience contributing to security strategy, governance, and continuous improvement programmes.
Working Arrangements
This is a hybrid role, with the successful candidate expected to spend approximately 40–60% of their working time collaborating with colleagues in person at the designated office location.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Flexible working arrangements may also be considered, including reasonable adjustments for candidates with disabilities or long-term health conditions.
Benefits
The role offers a competitive salary and a comprehensive benefits package, including:
- 28 days annual leave plus bank holidays
- Private medical insurance
- Permanent Health Insurance
- Discretionary annual bonus
- Group personal pension scheme
- Life assurance of up to 4x annual salary
- Green travel schemes
- Flexible and family-friendly benefits
Recruitment Process
The recruitment process is expected to include:
- Three role-related application questions requiring brief responses.
- A 15-minute screening call with the Hiring Manager.
- First-stage virtual interview via Microsoft Teams.
- Final-stage in-person interview.
The application closing date is 2 September. Applications will be reviewed on an ongoing basis, with interviews expected to take place shortly after shortlisting.
Successful candidates will be subject to satisfactory background checks, including DBS checks where applicable.
Reasonable adjustments can be requested throughout the recruitment process.
Equal Opportunities
We are committed to providing an inclusive and equitable recruitment process. Applications are welcomed from candidates of all backgrounds, experiences, and communities.
We believe that diversity of thought, background, and experience contributes to better outcomes and are committed to creating an environment where everyone can develop, contribute, and build a successful career.
Ready to Apply?
If you have the security assurance, cyber risk, vulnerability management, and stakeholder management experience required for this position, we encourage you to apply.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills