Information and Cyber Risk Assurance Advisor
We are seeking an Information and Cyber Risk Assurance Advisor to support the effective management of information security, technology and cyber risks across a complex operational environment. The role will provide independent, practical assurance over risk management activities, helping to identify vulnerabilities, assess control effectiveness and promote continual improvement in cyber resilience. You will work with stakeholders across technology, security, risk, compliance and business functions to ensure that information and cyber risks are understood, appropriately managed and reported.
Key responsibilities will include planning and delivering risk-based assurance reviews, assessing the design and operating effectiveness of information security controls, and supporting the maintenance of risk and control frameworks. You will review policies, standards, procedures and evidence against relevant regulatory, industry and internal requirements, documenting findings and agreeing pragmatic remediation actions. The role will also contribute to risk assessments, control testing, third-party and supplier assurance, audit preparation, incident and issue analysis, and the development of meaningful management information. You will monitor remediation activity, challenge risk owners where appropriate and provide clear reporting on emerging threats, control gaps and overall risk exposure.
The successful candidate will have experience in information security, cyber risk, technology risk, internal audit, compliance or a related assurance discipline. You will have a sound understanding of security governance, risk and control principles, and familiarity with recognised frameworks such as ISO 27001, NIST, COBIT or equivalent. Experience of conducting assurance reviews, interpreting technical and business information, and communicating findings to both specialist and non-specialist audiences is essential. Relevant professional qualifications or certifications, such as CISA, CRISC, CISSP, ISO 27001, or equivalent experience, would be advantageous. You should be analytical, well organised and comfortable working independently, with the judgement and communication skills to build trusted relationships and influence positive outcomes.
Information and Cyber Risk Assurance Advisor
Other similar jobs
Popular job searches
Your next job
starts here.
JOB SPECIALISMS
LATEST JOBS
TOP SEARCHES
LOCATIONS
- Security Engineer
- Security Analyst
- Security Architect
- Security Consultant
- IT Security Manager
- Identity Access Management IAM
- SOC Analyst
- Cyber Security Consultant
- Data Protection
- Penetration Tester
- Application Security
- Governance and Compliance
LATEST JOBS
- Senior Manager, Business Infor...
- Senior Data Protection Manager
- Cyber Security Engineer
- PAM Consultant
- Associate Security Engineer
- GRC Consultant
- Cyber Security Manager
- Risk & Controls Analyst (Cyber...
- Security Analyst – Emerging Te...
- PAM Architect
- Senior GRC Analyst
- OT SIEM Engineer