Security Assurance Specialist

We’re looking for an experienced Security Assurance Specialist to support a major security transformation programme, providing independent assurance over security controls, remediation activity and residual risk.

Key Responsibilities

Independently assess security controls, remediation activity and supporting evidence.Evaluate control design, implementation and operating effectiveness.Identify evidence gaps and communicate required actions to control owners.Maintain clear, auditable assurance records and defensible conclusions.Support risk reassessment and security readiness across transformation and hypercare phases.Identify recurring control weaknesses and escalate material findings.Assess controls against relevant security policies, standards and frameworks.Work closely with GRC, security and wider technology teams to support ongoing assurance.Key Experience:Strong background in Information Security Assurance, Technology Risk, IT Audit or GRC.Experience assessing security control design and effectiveness.Strong understanding of ISO 27001 and NIST CSF.Practical knowledge across areas such as IAM, access governance, vulnerability management, network security, resilience, supplier security, data protection and security operations.Experience reviewing technical and governance evidence and producing clear assurance conclusions.SAP/ERP transformation experience would be advantageous.Desirable Certifications:CISSP, CISM, CISA, CRISC, ISO 27001 Lead Auditor/Implementer or equivalent.