Cyber Security Governance, Risk & Assurance Specialist
We are seeking a Cyber Security Governance, Risk & Assurance Specialist to strengthen security oversight, manage technology risk and support the continuous improvement of cyber security controls. This is an opportunity to play a key role in helping an organisation understand and manage its cyber risks while maintaining compliance with relevant regulatory, industry and internal requirements.
You will develop, maintain and review cyber security policies, standards, procedures and control frameworks. Working with stakeholders across technology, risk, compliance and the wider business, you will identify security risks, assess their potential impact, agree appropriate treatment plans and monitor progress through to completion. You will also support risk reporting, governance forums and management information, providing clear and concise advice to senior stakeholders.
The role will involve coordinating and supporting assurance activities, including internal and external audits, control assessments, supplier reviews and evidence gathering. You will help track findings, validate remediation activity and ensure that lessons learned are incorporated into security processes. You may also contribute to security assessments for new technologies, projects, services and third-party arrangements, ensuring that risks are identified early and managed effectively.
The successful candidate will have experience in cyber security governance, risk management, compliance or assurance, ideally within a complex or regulated environment. You will have a sound understanding of security frameworks and standards such as ISO 27001, NIST, CIS Controls or similar, together with experience translating technical risks into clear business impacts and practical recommendations.
Strong communication, organisation and stakeholder management skills are essential. You should be confident challenging constructively, managing multiple priorities and producing accurate written reports for both technical and non-technical audiences. Relevant professional qualifications, such as CISM, CRISC, CISSP, ISO 27001 or equivalent experience, would be advantageous. In return, you will have the opportunity to influence security maturity, support meaningful risk reduction and develop your career within a collaborative and evolving environment.
Cyber Security Governance, Risk & Assurance Specialist
Other similar jobs
Popular job searches
Your next job
starts here.
JOB SPECIALISMS
LATEST JOBS
TOP SEARCHES
LOCATIONS
- Security Engineer
- Security Analyst
- Security Consultant
- Identity Access Management IAM
- IT Security Manager
- Security Architect
- Data Protection
- Cyber Security Consultant
- Governance and Compliance
- Risk Analyst
- SOC Analyst
- Application Security
LATEST JOBS
- Cyber Security Engineer
- Interim Cyber Security Interna...
- Lead DevSecOps Engineer
- Data Privacy Specialist UK
- Security and Compliance Engine...
- GCIO Operations Manager - Cybe...
- Information Security Analyst
- Senior Director - DevOps Secur...
- Head of Information Security
- Lead Cloud Security Engineer
- Cyber Policy Lead
- IT Security Auditor