Location Remote - (Newbury/Paddington)
Contract 5 Months (Visibility of extension)
Rate £630 per day through umbrella
Hours Monday to Friday
Job Overview The Cyber Security Assurance Specialist is responsible for ensuring that the level of control effectiveness and compliance with security policies and standards across a wide range of security domains are understood and appropriate actions taken to reduce risk.

• plan, organize, and execute deep dive control tests within the IT, Mobile and Fixed Telecommunications network environments.
• document testing, discuss findings with key stakeholders, recommend improvement opportunities to remediate identified vulnerabilities and prepare management reports.
• track remediation of raised issues and work with stakeholders on overdue actions.

Key responsibilities

• Maintain an up-to-date picture of control effectiveness and compliance with security policies and standards, including deviations, weaknesses and the associated risks
• Apply intelligence/ situational awareness to prioritise assurance activities based on risk
• Carry out control testing, undertake deep dive reviews and track remediation activities
• Prepare metrics and KPIs on control effectiveness and remediation status, and report status of Group and Local Markets to relevant governance bodies
• Provide guidance to other security staff on security assurance and control testing techniques and best practice
• Drive automated control testing by working with other teams and Technology Security programmes

Experience Needed

• 3+ years technical experience in controls testing in complex IT or Telecommunications environments
• Experienced Cyber Security Assurance specialist/Auditor
• Experience in control testing
• Daily reviews
• Familiarity with of security risks as well as processes, technologies, and tools to mitigate these risks - preferably including the specific risks and countermeasures in the Telecommunications environment
• Experience in technical control testing, assurance, and compliance
• Excellent reporting (oral and written) and stakeholder management skills
• Attention to detail, strong analytical skills, and efficient problem-solving capability
• Used to work in a global environment and ability to adapt style to different cultures and audiences
• Solid knowledge and experience of different technologies (web applications, infrastructure, operating systems, cloud)
• Ideally certifications as CISA, CISSP, SSCP, CISM, ISO27001 lead auditor and experience in working with ISO27001 and NIST security frameworks