Security Assurance Specialist

Overview

In this role, you provide independent, data-driven security assurance to Board and EMT, evaluating whether security outcomes align with best practice and identifying improvement opportunities. You will combine deep security expertise with analytics and AI to deliver concise findings across a complex, technology-driven organisation. Your work spans scoping reviews, stakeholder discussions up to Board level, and shaping security improvements in collaboration with cross-functional teams. This is a chance to influence security strategy at scale in a fast-paced, research-driven environment.

Pay / Benefits

• highly competitive compensation
• Lunch provided (Just Eat for Business)
• 30 days’ annual leave
• 9% pension contributions
• comprehensive healthcare and life assurance
• cycle-to-work scheme

Responsibilities

• Scope and conduct in-depth security reviews
• Assess current- and target-state security capabilities against good practice
• Leverage data analytics, automation and AI to enhance evidence gathering and assurance coverage
• Write concise reports for Board and EMT
• Discuss conclusions with stakeholders up to Board/EMT
• Provide input into security improvements authored by operational parts of the business
• Build a broad understanding of the organisation, processes and technologies
• Develop strong cross-team relationships and maintain independence of assurance
• Improve security assurance capabilities, including practical use of AI

Key requirements

• Extensive information security experience (including first- or second-line roles)
• Experience conducting assessments of security capabilities
• Good understanding of security risk management
• Strong analytical and investigative skills
• Experience applying automation, data analytics and AI to security/risk/assurance challenges
• Excellent written and verbal communication skills
• Ability to think creatively and challenge conventional approaches
• Comfort engaging with experts across the business, including in unfamiliar areas
• Familiarity with AI risks, controls and governance considerations
• Familiarity with Cloud Computing, Kubernetes and DevOps tooling (Terraform, Jenkins)
• Familiarity with information security frameworks (ISO 27000, CIS, NIST) and control frameworks such as SCF
• Comfort with change and ambiguity
• Some knowledge of assurance and audit techniques

• Creative thinking
• Strong communication
• Stakeholder management
• Cloud Computing
• Kubernetes
• DevOps tooling (Terraform, Jenkins)

…