Commercial Security and Information Assurance Lead

Reference: rgbfmyoh91yfr8dosi2m

We are seeking an experienced Commercial Security and Information Assurance Lead to provide strategic direction and practical leadership across commercial security, information assurance and risk management. This is an influential role responsible for protecting sensitive information, strengthening security practices and ensuring that commercial activity supports regulatory, contractual and organisational requirements.

You will lead the development, implementation and continual improvement of security and information assurance frameworks, policies and processes. Working with colleagues across procurement, legal, technology, operations and senior leadership, you will assess risks, define appropriate controls and provide clear, proportionate advice throughout the commercial lifecycle. You will also support security input to tenders, contracts, supplier due diligence, assurance reviews and ongoing relationship management.

Key responsibilities will include maintaining security standards and governance arrangements; overseeing information assurance activities and risk registers; reviewing supplier security obligations and performance; supporting incident response and remediation; and preparing concise reports, briefings and recommendations for senior stakeholders. You will promote a strong security culture by developing guidance, delivering awareness activities and ensuring that relevant teams understand their responsibilities.

The successful candidate will have substantial experience in commercial security, information assurance, supplier assurance, governance or a closely related field. You will be confident interpreting security requirements, assessing risk and translating technical or regulatory matters into clear commercial advice. Experience of working with recognised security and information assurance frameworks, data protection requirements, contractual controls and third-party risk management is essential.

You should be an effective communicator and relationship builder, capable of influencing stakeholders at all levels while maintaining sound professional judgement and attention to detail. The ability to manage competing priorities, work independently and deliver practical outcomes in a changing environment is important. Relevant professional qualifications or certifications in information security, risk, audit, data protection or commercial management would be advantageous.

COMPETITIVE SALARY
Added 21/10/2026
Reference: rgbfmyoh91yfr8dosi2m

Commercial Security and Information Assurance Lead

London, England, United Kingdom Permanent Information Assurance

Other similar jobs

Security Architect (UKSV)

Added 24/09/2026

We are seeking an experienced Security Architect to design, develop and maintain secure, resilient technology environments across a complex and evolving digital landscape. You will provide expert security guidance throughout the systems development lifecycle, ensuring that architecture, infrastructure, applications and services meet business needs while complying with relevant security principles, policies and regulatory obligations. Key responsibilities will include producing and maintaining security architectures, principles, patterns and technical standards; assessing security risks and recommending proportionate controls; and supporting the design of cloud, on-premises and hybrid solutions. You will work closely with engineering, delivery, risk, governance and operational teams to embed security...

Learn more

Senior Security Consultant (Delivery & Commercial Growth)

Added 02/09/2026

We are seeking a Senior Security Consultant to lead the delivery of high-quality cybersecurity consulting engagements while contributing to commercial growth. This role combines technical leadership, client advisory, solution development and business development, making it ideal for an experienced security professional who enjoys working across both delivery and strategic growth activities. You will work with clients to understand their security objectives, assess their current capabilities and design practical, risk-based solutions aligned with business priorities and regulatory expectations. Responsibilities will include leading security assessments, reviews and transformation programmes; developing project plans, methodologies, reports and executive presentations; and providing clear, actionable recommendations...

Learn more

Vice President, Field CISO Commercial, Europe

Added 18/09/2026

We are seeking a Vice President, Field CISO Commercial, Europe to lead strategic cybersecurity engagement across the region. This senior executive will work closely with commercial customers, business leaders, security teams and partners to demonstrate how effective cyber resilience supports business growth, regulatory compliance and digital transformation. The role combines deep security expertise, executive communication and commercial acumen, with responsibility for shaping customer strategy and strengthening trusted relationships at board and C-suite level. Key responsibilities include acting as a trusted security adviser to enterprise and strategic customers; translating complex cyber risks into clear business outcomes; supporting sales and account teams...

Learn more

Senior Manager – Cyber Advisory (Commercial & Retail Sector)

Added 14/09/2026

We are seeking an experienced Senior Manager – Cyber Advisory to lead the delivery of high-quality cybersecurity advisory services across the commercial and retail sectors. This role will work closely with senior client stakeholders to understand business priorities, assess cyber risk, and develop practical, risk-based strategies that strengthen resilience while supporting growth and transformation. You will operate across a varied portfolio of engagements, advising organisations on their cybersecurity posture, governance, operating models, regulatory obligations, and technology-enabled change. Key responsibilities will include leading cyber maturity assessments, risk and control reviews, security strategy development, target operating model design, incident readiness, third-party risk,...

Learn more

Senior Manager – Cyber Advisory (Commercial & Retail Sector)

Added 14/09/2026

We are seeking an experienced Senior Manager – Cyber Advisory to lead the delivery of high-impact cybersecurity advisory services across the commercial and retail sectors. This role will work with senior stakeholders to understand business objectives, assess cyber risk, and develop practical strategies that strengthen resilience while supporting growth, innovation, and regulatory compliance. You will manage complex engagements from initial scoping through to delivery, ensuring recommendations are commercially relevant, clearly communicated, and aligned with each client’s risk appetite. Key responsibilities include leading cyber maturity assessments, risk and control reviews, security strategy development, operating model design, and transformation programmes. You will...

Learn more

Senior Security Assurance Specialist , AWS Compliance and Security Assurance EMEA

Added 09/10/2026

We are seeking a Senior Security Assurance Specialist to support compliance and security assurance activities across the EMEA region. This role will help maintain confidence in the organisation’s security, privacy and resilience controls by coordinating assurance programmes, supporting regulatory requirements and engaging with internal and external stakeholders. You will work closely with security, compliance, risk, legal, audit and operational teams to assess control effectiveness and promote continuous improvement. Key responsibilities include managing evidence collection for internal and external audits, coordinating responses to customer and regulatory assessments, and preparing clear, accurate reports for senior stakeholders. You will review security and compliance...

Learn more

Security Assurance Specialist , AWS Compliance and Security Assurance EMEA

Added 25/09/2026

We are seeking a Security Assurance Specialist to support compliance and security assurance activities across the EMEA region. This role will help demonstrate that cloud services, business processes and operational controls meet applicable regulatory, contractual and industry requirements. You will work with security, legal, privacy, risk, audit and engineering teams to assess control effectiveness, coordinate evidence and communicate assurance outcomes to internal and external stakeholders. Key responsibilities include supporting customer, regulatory and third-party assurance requests; coordinating audit and assessment activities; reviewing policies, procedures and control documentation; and identifying opportunities to improve the efficiency and consistency of assurance processes. You will...

Learn more

Cyber Security and Information Assurance Lead

Added 18/09/2026

We are seeking a Cyber Security and Information Assurance Lead to provide strategic and operational leadership across cyber security, information assurance, risk management and data protection. The successful candidate will help safeguard critical systems, information assets and services by developing robust security frameworks, policies and controls aligned with recognised standards and regulatory requirements. You will work closely with technology, operational and business stakeholders to ensure that security is embedded throughout the organisation’s services, projects and change programmes. Key responsibilities will include leading the assessment and management of cyber and information risks; maintaining security policies, standards, procedures and assurance documentation; and...

Learn more

Security Assurance Specialist, Security Assurance

Added 21/10/2026

We are seeking a Security Assurance Specialist to support the delivery of effective security governance, risk management and assurance across a complex technology and business environment. This role will help ensure that security controls are appropriately designed, implemented and operating effectively, while promoting a practical, risk-based approach to information security. You will plan and conduct security assurance reviews, control assessments and compliance activities across systems, services, suppliers and business processes. Responsibilities will include gathering and evaluating evidence, identifying control weaknesses, documenting findings and agreeing proportionate remediation plans with relevant stakeholders. You will monitor actions through to completion and provide clear,...

Learn more

Security Assurance Solutions Architect, AWS Security Assurance Services

Added 09/09/2026

We are seeking a Security Assurance Solutions Architect to help customers design, implement, and operate secure, resilient technology environments. In this role, you will serve as a trusted security advisor, translating complex regulatory, risk, and compliance requirements into practical technical solutions. You will work closely with security, engineering, architecture, risk, and compliance teams to develop assurance strategies that support business objectives while maintaining strong security controls. Your responsibilities will include assessing customer environments, identifying security and compliance gaps, and recommending improvements across governance, identity and access management, data protection, infrastructure security, monitoring, incident response, and resilience. You will create and...

Learn more

Security Assurance Solutions Architect, AWS Security Assurance Services

Added 09/09/2026

We are seeking a Security Assurance Solutions Architect to help customers design, implement and validate secure solutions across cloud environments. In this role, you will act as a trusted security advisor, translating complex assurance requirements into practical technical architectures, controls and implementation plans. You will work with security, risk, compliance, engineering and business stakeholders to understand their objectives and guide them towards resilient, compliant and scalable outcomes. Key responsibilities include developing security assurance strategies; mapping regulatory, contractual and industry requirements to technical and organisational controls; reviewing architectures and identifying security gaps; and recommending pragmatic remediation approaches. You will support customer...

Learn more

Principal Cyber Risk Management & Assurance Advisor - (ISO 27001 / Cyber Assurance / AWS / CISSP / CISM - SC Cleared

Added 06/10/2026

We are seeking a Principal Cyber Risk Management & Assurance Advisor to provide expert leadership across cyber risk, information assurance and security governance. This is a senior opportunity for an experienced professional who can assess complex technology environments, translate risk into practical business decisions and support the delivery of secure, resilient services. The successful candidate will work with technical, operational and senior stakeholder groups to promote effective cyber risk management and assurance practices. Key responsibilities will include developing and maintaining cyber risk management frameworks, policies, standards and assurance processes aligned with ISO 27001, relevant government security principles and industry best...

Learn more

Principal Cyber Risk Management & Assurance Advisor - (ISO 27001 / Cyber Assurance / AWS / CISSP / CISM - SC Cleared

Added 06/10/2026

We are seeking a Principal Cyber Risk Management & Assurance Advisor to provide expert guidance across cyber security risk, governance and assurance activities within a complex technology environment. This is a senior role for an experienced professional who can translate security requirements into practical, proportionate controls and confidently advise stakeholders at all levels. The successful candidate will support the management of cyber risk across services, programmes, suppliers and cloud platforms, helping to maintain a strong and demonstrable security posture. Key responsibilities will include leading cyber risk assessments, maintaining risk registers and treatment plans, and providing assurance against relevant policies, standards...

Learn more

Technology and Cybersecurity Assurance and Risk Manager

Added 15/10/2026

We are seeking an experienced Technology and Cybersecurity Assurance and Risk Manager to lead the development, coordination and continuous improvement of technology assurance, cybersecurity risk management and governance activities. You will provide independent oversight and constructive challenge across technology services, projects, suppliers and business change, helping to ensure that risks are identified, assessed, managed and reported effectively. Key responsibilities will include maintaining technology and cybersecurity risk frameworks, policies, standards and control requirements; conducting risk and control assessments; overseeing remediation plans; and preparing clear reports for senior stakeholders and relevant governance forums. You will support security assurance reviews, audit activity, regulatory...

Learn more

Information Assurance and Security Officer - Legal Aid Agency (Ref: 23071)

Added 09/10/2026

We are seeking an experienced Information Assurance and Security Officer to support the effective management of information security, data protection and business continuity across a complex public service environment. You will help protect sensitive information, systems and services by providing practical advice, promoting good security practices and ensuring that risks are identified, assessed and managed appropriately. Key responsibilities will include maintaining information assurance documentation, policies, procedures and risk registers; supporting security and privacy impact assessments; monitoring compliance with relevant legislation, standards and internal controls; and assisting with the investigation, management and reporting of security incidents. You will contribute to assurance...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.