Security control assurance specialist

Reference: 179fkijcad2excy4wr83

We are seeking a Security Control Assurance Specialist to support the design, assessment and continuous improvement of security controls across a complex technology and business environment. In this role, you will provide independent assurance that controls are appropriately designed, consistently implemented and operating effectively against relevant policies, standards, regulatory obligations and recognised security frameworks. You will work closely with information security, technology, risk, compliance and business stakeholders to identify weaknesses, assess exposure and agree practical remediation plans.

Your responsibilities will include planning and delivering control assurance reviews, maintaining clear audit trails and evidence, documenting findings, and preparing concise reports for senior stakeholders. You will monitor remediation activity, validate corrective actions and escalate overdue or high-risk issues where appropriate. The role will also involve supporting risk and control self-assessments, contributing to internal and external audits, reviewing exceptions, and helping to improve assurance methodologies, reporting and governance processes. You will be expected to interpret control requirements, challenge evidence constructively and provide recommendations that strengthen the organisation’s security and resilience.

Applicants should have experience in security assurance, IT audit, risk management, compliance or a related discipline, with a sound understanding of information security principles and control frameworks such as ISO 27001, NIST, COBIT or CIS Controls. You should be confident evaluating evidence, analysing control gaps and communicating technical or regulatory matters to both specialist and non-specialist audiences. Strong organisational skills, attention to detail and the ability to manage several reviews or remediation activities at once are essential. Relevant professional qualifications, such as CISA, CISSP, CRISC, ISO 27001 Lead Auditor or equivalent experience, would be advantageous. A pragmatic, inquisitive approach and a commitment to continuous improvement will help you succeed in this role.

COMPETITIVE SALARY
Added 12/10/2026
Reference: 179fkijcad2excy4wr83

Security control assurance specialist

London, England, United Kingdom Permanent Information Assurance

Other similar jobs

Specialist, security regulatory compliance

Added 20/08/2026

We are seeking a detail-oriented Specialist in Security Regulatory Compliance to join our dynamic team. In this role, you will be responsible for ensuring adherence to all relevant security regulations and standards. Your primary duties will involve conducting comprehensive audits, monitoring compliance metrics, and developing robust compliance programs that align with industry best practices. You will collaborate with cross-functional teams to assess risks and implement necessary controls, ensuring that our organization maintains the highest level of security integrity. As a key member of our compliance team, you will also play a critical role in preparing for and responding to regulatory...

Learn more

Senior Data Protection Specialist

Added 17/09/2026

We are seeking a Senior Data Protection Specialist to provide expert guidance on privacy, data protection and information governance across a complex organisation. The successful candidate will advise stakeholders on the lawful, fair and transparent use of personal data, helping to embed effective privacy practices into business operations, projects, products and services. This role will work closely with legal, information security, technology, compliance and operational teams to identify risks and develop practical, proportionate solutions. Key responsibilities will include providing advice on data protection legislation and regulatory requirements; conducting and reviewing Data Protection Impact Assessments, legitimate interest assessments and transfer assessments;...

Learn more

Senior Security Assurance Specialist , AWS Compliance and Security Assurance EMEA

Added 09/10/2026

We are seeking a Senior Security Assurance Specialist to support compliance and security assurance activities across the EMEA region. This role will help maintain confidence in the organisation’s security, privacy and resilience controls by coordinating assurance programmes, supporting regulatory requirements and engaging with internal and external stakeholders. You will work closely with security, compliance, risk, legal, audit and operational teams to assess control effectiveness and promote continuous improvement. Key responsibilities include managing evidence collection for internal and external audits, coordinating responses to customer and regulatory assessments, and preparing clear, accurate reports for senior stakeholders. You will review security and compliance...

Learn more

Security Assurance Specialist , AWS Compliance and Security Assurance EMEA

Added 25/09/2026

We are seeking a Security Assurance Specialist to support compliance and security assurance activities across the EMEA region. This role will help demonstrate that cloud services, business processes and operational controls meet applicable regulatory, contractual and industry requirements. You will work with security, legal, privacy, risk, audit and engineering teams to assess control effectiveness, coordinate evidence and communicate assurance outcomes to internal and external stakeholders. Key responsibilities include supporting customer, regulatory and third-party assurance requests; coordinating audit and assessment activities; reviewing policies, procedures and control documentation; and identifying opportunities to improve the efficiency and consistency of assurance processes. You will...

Learn more

Security Assurance Specialist , AWS Compliance and Security Assurance EMEA

Added 19/08/2026

We are seeking a detail-oriented Security Assurance Specialist to join our dynamic team focused on compliance and security assurance within the EMEA region. In this role, you will be responsible for evaluating and implementing security measures to protect sensitive information and ensure compliance with industry regulations. Your expertise will be crucial in assessing risks, conducting audits, and developing strategies to enhance the security posture of our cloud services. You will collaborate with cross-functional teams to identify vulnerabilities and recommend solutions that align with best practices and compliance requirements. The ideal candidate will possess a strong understanding of cloud security frameworks...

Learn more

Senior Security Assurance Specialist , AWS Compliance and Security Assurance EMEA

Added 19/08/2026

We are seeking a Senior Security Assurance Specialist to join our team, focusing on compliance and security assurance across the EMEA region. In this role, you will be responsible for leading security assessments, audits, and compliance initiatives to ensure alignment with industry standards and regulatory requirements. You will collaborate with various stakeholders, including engineering, product management, and legal teams, to develop and implement security policies, procedures, and best practices. Your expertise will be crucial in identifying vulnerabilities and recommending effective mitigation strategies to enhance security posture. The ideal candidate will have a strong background in information security, risk management, and...

Learn more

Vice President, IT Security Risk and Control

Added 01/10/2026

We are seeking a senior technology and risk leader to serve as Vice President, IT Security Risk and Control. This role will provide strategic direction for the organisation’s information security risk and control framework, helping to protect critical systems, data, and services while enabling responsible business growth. The successful candidate will lead the development, implementation, and continuous improvement of security governance, risk management, and control assurance programmes across a complex technology environment. Key responsibilities include establishing security risk appetite, policies, standards, and operating procedures; overseeing technology risk assessments, control testing, issue remediation, and regulatory reporting; and providing clear, insightful reporting...

Learn more

Staff Security Engineer, Abuse Control

Added 21/09/2026

We are seeking a Staff Security Engineer, Abuse Control to lead the design and development of systems that protect users, platforms, and business operations from abuse. In this role, you will shape the strategy for detecting, preventing, and responding to threats such as account compromise, fraud, spam, automated attacks, platform manipulation, and other forms of malicious activity. You will work across security, engineering, product, data science, operations, and legal teams to identify emerging risks and deliver scalable, measurable controls. You will define technical direction for abuse prevention capabilities, including risk signals, detection engines, automated enforcement, investigation workflows, and appeals processes....

Learn more

Cloud Security Control Engineer

Added 18/09/2026

We are seeking a Cloud Security Control Engineer to help design, implement and continuously improve security controls across cloud environments. The role will support the protection of infrastructure, applications, data and services by translating security policies and regulatory requirements into practical, measurable controls. You will work closely with cloud engineering, architecture, risk, compliance and operations teams to ensure that security is embedded throughout the technology lifecycle. Key responsibilities include developing and maintaining cloud security control frameworks, standards and technical requirements; assessing cloud services and architectures for security risks; and supporting the implementation of identity and access management, network security, encryption,...

Learn more

Security Control Engineer - London

Added 20/08/2026

We are seeking a highly skilled Security Control Engineer to join our dynamic team in London. In this role, you will be responsible for designing, implementing, and maintaining security control systems to safeguard our infrastructure and data. You will conduct risk assessments, perform vulnerability analysis, and actively monitor security threats. Additionally, you will develop and enforce security policies and procedures, ensuring compliance with relevant regulations and standards. Collaboration with cross-functional teams will be essential as you work to integrate security measures into existing systems and processes. The ideal candidate will possess a strong background in security engineering, with experience in...

Learn more

Control Red Team - Research Engineer/Research Scientist

Added 24/09/2026

We are seeking a Control Red Team Research Engineer or Research Scientist to investigate how advanced AI systems can be evaluated, challenged and kept reliably under human direction. You will design and conduct rigorous experiments that test model behaviour under adversarial, ambiguous and high-pressure conditions, with a particular focus on control, oversight, robustness and the risk of systems pursuing unintended objectives. Your work will help identify weaknesses in evaluation methods, monitoring approaches and operational safeguards, and translate findings into practical improvements. Responsibilities will include developing threat models and red-team strategies; creating test environments, scenarios and benchmarks; designing automated and human-in-the-loop...

Learn more

Cyber Tech Risk and Control Manager- BPL -CIO

Added 04/09/2026

We are seeking an experienced Cyber Technology Risk and Controls Manager to strengthen the management of technology and cyber risk across a complex, highly regulated environment. This role will provide independent challenge, practical guidance and oversight of the control framework, helping to ensure that technology services, systems and processes remain secure, resilient and aligned with internal standards and regulatory expectations. Key responsibilities will include assessing cyber and technology risks, maintaining risk and control registers, and monitoring the design and operating effectiveness of key controls. You will support control testing, issue identification, remediation tracking and management reporting, while providing clear insight...

Learn more

Control Red Team - Research Engineer/Research Scientist

Added 04/09/2026

We are seeking a Control Red Team Research Engineer/Research Scientist to investigate how advanced technical systems behave under challenging, adversarial, and unexpected conditions. In this role, you will design and execute red-team evaluations that identify weaknesses in system control, reliability, alignment, safety, and robustness. You will work across research and engineering disciplines to develop realistic threat models, construct rigorous test environments, and translate experimental findings into practical improvements. Your responsibilities will include developing novel evaluation methodologies, automated testing tools, and experimental protocols; creating challenging scenarios and datasets; analysing system behaviour using quantitative and qualitative techniques; and documenting vulnerabilities, failure modes,...

Learn more

Control Red Team - Research Engineer/Research Scientist

Added 03/09/2026

We are seeking a Control Red Team Research Engineer or Research Scientist to investigate how advanced AI systems can be evaluated, monitored, and controlled under challenging or adversarial conditions. You will design and conduct research that probes model capabilities, identifies weaknesses in safeguards, and tests whether systems behave reliably when exposed to unexpected inputs, strategic pressure, or attempts to circumvent established controls. Your work will help inform practical approaches to robust deployment, oversight, and risk reduction. Responsibilities will include developing red-team methodologies, constructing evaluation environments, and creating challenging test cases across areas such as deceptive behaviour, instruction following, tool use,...

Learn more

Senior Manager, IT Risk & Control , Wealth Management Europe (London)

Added 25/08/2026

We are seeking a Senior Manager, IT Risk & Control to support a leading wealth management business across Europe, based in London. This role will provide strategic oversight of technology risk, control frameworks and governance, helping ensure that technology services remain secure, resilient, compliant and aligned with business objectives. You will work closely with senior stakeholders across technology, risk, compliance, audit and business functions, providing constructive challenge and practical guidance on the management of IT risk. Key responsibilities will include maintaining and enhancing the IT risk and control framework; identifying, assessing and monitoring technology, cyber, operational resilience and third-party risks;...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.