Regulatory Cyber Assurance Principal
We are seeking an experienced Regulatory Cyber Assurance Principal to lead the development and delivery of cyber assurance activities across a complex, highly regulated environment. This is a senior role for an individual who can translate regulatory expectations into practical controls, measurable outcomes and clear assurance plans, while providing constructive challenge to technology and business leaders.
You will define and maintain the cyber assurance framework, ensuring alignment with relevant legislation, regulatory requirements, industry standards and internal policies. You will oversee risk-based assurance reviews covering areas such as governance, identity and access management, infrastructure security, cloud services, third-party risk, vulnerability management, resilience and incident response. Your work will provide senior stakeholders with confidence that key cyber risks are understood, managed and appropriately reported.
Key responsibilities will include setting the annual assurance plan; leading regulatory assessments, thematic reviews and control testing; evaluating evidence and identifying control weaknesses; tracking remediation activity; and producing concise reports for executive and governance forums. You will also support responses to regulatory enquiries and examinations, contribute to policy and control improvements, and promote consistent assurance practices across teams and suppliers.
The successful candidate will have substantial experience in cyber security assurance, audit, risk management or regulatory compliance, ideally within a complex or regulated sector. You will possess strong knowledge of recognised frameworks and standards, such as NIST, ISO 27001, COBIT, CIS Controls or equivalent, alongside a sound understanding of data protection, operational resilience and technology risk. Relevant professional qualifications, such as CISA, CISSP, CRISC, CISM or equivalent experience, are desirable.
You will be confident engaging with senior stakeholders, technical specialists, auditors and regulators, and able to communicate complex issues clearly to both technical and non-technical audiences. Strong analytical, report-writing and influencing skills are essential, as is the judgement to prioritise material risks and challenge constructively. The role requires integrity, independence, attention to detail and a pragmatic approach to achieving sustainable improvements in cyber resilience.
Regulatory Cyber Assurance Principal
Other similar jobs
Popular job searches
Your next job
starts here.
JOB SPECIALISMS
LATEST JOBS
TOP SEARCHES
LOCATIONS
- Security Engineer
- Security Analyst
- Security Consultant
- IT Security Manager
- Security Architect
- Identity Access Management IAM
- Data Protection
- Cyber Security Consultant
- SOC Analyst
- Governance and Compliance
- Risk Analyst
- Penetration Tester
LATEST JOBS
- Senior Consultant or Manager,...
- Third Party Cyber Risk Lead
- VodafoneThree - Cyber Security...
- Associate Director, Cyber Secu...
- Senior Cyber Security Engineer
- Manager, Senior Manager, Cyber...
- Consultant, Cyber Security Ope...
- Head of Department, Cyber & In...
- Application Security Engineer
- SOC Manager
- Manager, Senior Manager, Cyber...
- IT & Security Analyst