Assurance Specialist

We are seeking an experienced Information Security & Assurance Advisor to play a key role in safeguarding sensitive information, supporting compliance programmes, and strengthening information security governance across a complex and highly regulated environment. This is an excellent opportunity for an Information Security, Information Assurance, Risk, Compliance, or Governance professional looking to make a meaningful impact while working with senior stakeholders, suppliers, and technical teams.

The Role

As an Information Security & Assurance Advisor, you will provide expert guidance on information security, risk management, and assurance activities. You will support the development and implementation of security policies, conduct audits and compliance reviews, investigate security incidents, and help ensure compliance with national security standards and regulatory requirements.

You will be responsible for:

• Providing specialist advice on information security, risk, and assurance matters
• Supporting and maintaining information security compliance programmes
• Conducting information security audits and assurance reviews across sites and suppliers
• Performing third-party supplier security assessments
• Supporting risk assessments and security assurance activities for new and existing services
• Coordinating investigations into security incidents and recommending corrective actions
• Supporting Data Protection Impact Assessments (DPIAs)
• Developing and maintaining information security policies, standards, and procedures
• Delivering security awareness training and guidance to stakeholders
• Working closely with internal departments, external partners, and suppliers to promote security best practice
• Supporting audit, accreditation, and compliance activities

Essential Experience

• Experience working in Information Security, Information Assurance, Cyber Governance, Risk, or Compliance
• Experience delivering information security services within a complex or multi-site organisation
• Experience developing and implementing security policies, standards, and procedures
• Experience conducting audits, assurance reviews, or accreditation activities
• Experience engaging with senior stakeholders, suppliers, and external organisations
• Strong understanding of security risk management principles
• Knowledge of data protection legislation and information governance requirements

Technical Knowledge

• Information Security Management principles
• Risk and Assurance frameworks
• ISO 27001 and/or NIST Cyber Security Framework
• Security auditing and compliance monitoring
• Information risk assessment methodologies
• Confidentiality, Integrity, and Availability (CIA) principles

Qualifications

• One or more recognised Information Security, Risk, Governance, or Data Protection qualifications, such as:
• CISSP
• CISM
• CRISC
• GIAC/GRC certifications
• BCS Information Security qualifications
• Data Protection Practitioner qualifications
• Equivalent industry-recognised certifications

Desirable

• Experience with PSN, SyAP, or government security compliance frameworks
• Experience conducting supplier security assessments
• Public sector, policing, defence, or critical infrastructure experience

Key Skills

• Excellent communication and stakeholder management skills
• Strong analytical and problem-solving abilities
• Ability to explain complex security concepts to non-technical audiences
• Strong report writing and documentation skills
• Ability to work independently and manage competing priorities
• High levels of integrity, discretion, and professionalism

This role offers the opportunity to work on high-impact security and assurance initiatives, influence organisational security strategy, and contribute to the protection of critical information assets in a highly respected and purpose-driven environment. If you're passionate about information security, governance, risk management, and assurance, we'd love to hear from you.