Job Description \n Role Title: Technology Control Frameworks Lead \n Duration: contract to run until 31/05/2027 \n Location: Wokingham. Hybrid 2-3 days per week onsite \n Rate: up to £506 p/d Umbrella inside IR35 \n Clearance required: Active SC Clearance is required \n Role purpose/summary \n Design and develop the Technology Control Framework : Create a single, coherent and practical set of technology, cyber security and IT controls, with clear control objectives and measurable requirements that can be consistently understood and applied across the client. \n Consolidate frameworks, standards and regulatory requirements : Analyse and rationalise ISO/IEC 27001:2022, NIST SP 800-53, NIST CSF, Cyber Assessment Framework (CAF), Cyber Essentials Plus and applicable legal/regulatory obligations, identifying overlaps, duplication, conflicts and gaps to produce an integrated control set. \n Establish control mapping, traceability and applicability : Map each control to its originating framework, standard and regulatory requirements, maintaining traceability to demonstrate coverage and identify gaps, while defining applicability across relevant technologies, services, processes and information asset types. \n Define control governance and assessment : Establish control ownership and accountability with Technology, Security, Risk and First Line stakeholders, alongside maturity and assessment criteria that enable consistent measurement of control implementation and effectiveness. Engage SMEs and control owners to ensure controls are technically appropriate, practical and accurately reflect how technology risks are managed across the client. \n Develop the client-wide implementation and embedding plan : Define how the Control Framework will be rolled out and adopted across the client teams, including implementation sequencing and dependencies, stakeholder engagement, communications, control-owner onboarding and the ongoing governance required to embed the framework into business-as-usual activities \n All profiles will be reviewed against the required skills and experience. Due to the high number of applications we will only be able to respond to successful applicants in the first instance. We thank you for your interest and the time taken to apply! \n If you receive suspicious outreach claiming to be from us, please contact us via the ManpowerGroup website.
SC Technology Control Frameworks Lead CGEMJP in Slough employer: Experis It
As a Cloud Security Engineer at our Knutsford location, you will join a dynamic and innovative team dedicated to driving secure digital transformation. We offer a hybrid work model that promotes work-life balance, alongside competitive rates and opportunities for professional growth in a supportive environment. Our culture fosters collaboration and continuous improvement, ensuring that you can thrive while making a meaningful impact on our cloud security capabilities.
