Information and Cybersecurity Assurance Manager

Information and Cybersecurity Assurance Manager Must be able to attain National Security Vetting at SC. DV is desirable, which would require 10 years unbroken residency in the UK. This is a senior security assurance role within a highly technical and regulated environment, working across cybersecurity, information assurance and Secure by Design. You''ll take ownership of key security workstreams across products, services and major programmes, ensuring security requirements are understood, evidenced and delivered throughout the project lifecycle. It''s a broad role covering security assurance, technical design, certification, risk, penetration testing, supplier security and incident response. What You''ll Be Doing Provide assurance against contractual security obligations for product and service deliverables, including ISO 27001, CE+ and DCC. Deliver security strategies, policies, management plans, procedures and governance in accordance with relevant frameworks and industry standards. Own cybersecurity assurance artefacts and security control requirements across contracted schedules and project milestones. Lead certification or contract dependent ITHCs, vulnerability management exercises and external penetration testing, ensuring remediation is completed and verified. Review infrastructure, cloud and application designs against Secure by Design principles and perform risk assessments for new technologies and business initiatives. Participate in Change Advisory Board (CAB) ..... full job details .....