Cyber Assurance Lead

Cyber Assurance Lead - £750 per day - Inside IR35 - Hybrid working in central London - 6 month initial contract.

We are supporting a major nuclear new-build programme in the UK and are looking for an experienced Cyber Assurance Lead to play a key role in ensuring the security and resilience of critical systems throughout their lifecycle.

This is a senior assurance position, providing independent oversight that cyber security controls are appropriately defined, implemented, operated and maintained. You will work across a complex, highly regulated environment, helping to ensure that systems remain secure as threats evolve and technology and operational requirements change.

As the Cyber Assurance Lead, you will act as a key line of defence, conducting assurance activities, audits and assessments, identifying vulnerabilities and risks, and working with technical and business stakeholders to ensure effective mitigation.

Key Responsibilities - 

• Lead cyber security assurance activities across systems and programmes throughout their lifecycle.
• Verify that cyber security controls have been implemented in line with risk assessments and risk management plans.
• Develop and deliver detailed cyber security audit and assurance plans.
• Assess the effectiveness of security controls, including their ongoing operation and maintenance.
• Conduct cyber security risk assessments, audits and compliance reviews within a highly regulated environment.
• Produce clear, detailed audit and assurance reports, presenting findings and recommendations to both technical and senior management audiences.
• Oversee remediation activities and ensure agreed mitigation actions are effectively implemented.
• Review compliance against relevant legal, regulatory and organisational requirements.
• Provide expert advice on cyber assurance, audit, risk management and security governance.
• Assess security hardening, vulnerability management and security testing activities.
• Work closely with stakeholders to promote a strong security culture and ensure cyber assurance remains embedded throughout the programme.

What Were Looking For -

Were looking for an experienced cyber security professional with a strong background in cyber assurance, risk and governance, ideally gained within a regulated or safety-critical environment.

You should have:

• Proven experience conducting cyber security risk assessments within a regulated environment nuclear experience would be highly advantageous.
• Experience implementing and managing Cyber Security Risk Management Plans.
• Previous experience leading cyber assurance audits and overseeing remediation and control implementation.
• Strong knowledge of cyber security standards and frameworks such as ISO 27001, COBIT 5 or equivalent.
• Experience across security technologies including Azure identity and networking, Windows security controls and firewall technologies.
• Knowledge of security hardening, testing and vulnerability management.
• Experience of cyber security risk management and governance, including relevant legal and regulatory requirements.
• Experience working within an Azure Cloud environment.
• Strong understanding of adversarial behaviours and evolving cyber threats.
• The ability to communicate complex security findings clearly to both technical specialists and senior stakeholders.
• Relevant professional certifications such as CISSP, CISM, Lead Security Auditor or CEH would be highly desirable.

Why Join?

• This is an opportunity to work on one of the UKs most significant nuclear new-build programmes, contributing to the secure delivery of critical national infrastructure.
• You will have the opportunity to operate at programme level, working with a broad range of technical, engineering and business stakeholders and helping shape the cyber assurance approach across a complex and evolving environment.

If you are an experienced cyber assurance professional looking for a role where your expertise will have genuine impact, wed be keen to hear from you.