Security Assurance Lead in Cambridge

Location: Cambridge / Hybrid – minimum 2 days per week in the office

Contract: Permanent

Hours: 35 hours per week

About the Role

We are looking for an experienced Security Assurance Lead to play a key role in strengthening information security, managing cyber risk, and improving security assurance across a complex technology environment. This is an influential and varied position, working closely with technology, security, and business teams to identify risks, improve controls, support compliance, and promote secure ways of working.

Key Responsibilities

• Lead security assurance activities covering attack surface management, vulnerability management, penetration testing, and security posture improvement.
• Work with technology and security teams to identify, assess, prioritise, and remediate vulnerabilities across applications, infrastructure, cloud services, and systems.
• Develop and maintain security policies, standards, procedures, and guidance.
• Support security risk assessments, supplier security reviews, and risk register management.
• Contribute to security governance, compliance, and external assessments, including alignment with ISO 27001 and NIST frameworks.
• Analyse threat intelligence, security testing results, and assurance data to identify priorities and improve organisational resilience.
• Provide clear security risk reporting and recommendations to senior stakeholders.
• Support incident preparedness, investigations, and security exercises.
• Monitor emerging cyber threats and identify opportunities to strengthen security through automation and new technologies.
• Contribute to the development and delivery of the wider security strategy.

About You

You will have 5+ years of experience in security testing, security assurance, or a closely related information security role, together with a strong understanding of security principles, cyber threats, risk management, and compliance frameworks. You should have:

• A degree in Computer Science, Information Security, or equivalent professional experience.
• Relevant professional certifications such as CISSP and/or recognised security testing qualifications.
• Proven experience managing information security risks and developing effective mitigations within medium to large organisations.
• Strong knowledge of security testing, vulnerability management, and assurance practices.
• Experience working with multiple stakeholders and influencing decision‑making at different levels.
• Excellent communication, presentation, and stakeholder management skills.
• Strong analytical and problem‑solving abilities.
• The ability to manage multiple projects and priorities independently.
• A proactive and self‑motivated approach to security and risk management.

Desirable Experience

The following experience would be advantageous:

• Developing and maintaining a supply chain/security risk register within a medium to large organisation.
• Hands‑on experience with AI applications and tools such as Microsoft Copilot, Claude, or similar technologies.
• Experience using penetration testing and vulnerability management platforms such as Tenable within complex technology environments.
• Experience presenting and reporting security risks, vulnerabilities, and mitigation plans to senior leadership.
• Experience contributing to security strategy, governance, and continuous improvement programmes.

Working Arrangements

This is a hybrid role, with the successful candidate expected to spend approximately 40–60% of their working time collaborating with colleagues in person at the designated office location. Flexible working arrangements may also be considered, including reasonable adjustments for candidates with disabilities or long‑term health conditions.

Benefits

The role offers a competitive salary and a comprehensive benefits package, including:

• 28 days annual leave plus bank holidays
• Private medical insurance
• Permanent Health Insurance
• Discretionary annual bonus
• Group personal pension scheme
• Life assurance of up to 4x annual salary
• Green travel schemes
• Flexible and family‑friendly benefits

Recruitment Process

The recruitment process is expected to include:

• Three role‑related application questions requiring brief responses.
• A 15-minute screening call with the Hiring Manager.
• First-stage virtual interview via Microsoft Teams.
• Final-stage in-person interview.

The application closing date is 2 September. Applications will be reviewed on an ongoing basis, with interviews expected to take place shortly after shortlisting. Successful candidates will be subject to satisfactory background checks, including DBS checks where applicable. Reasonable adjustments can be requested throughout the recruitment process.

Equal Opportunities

We are committed to providing an inclusive and equitable recruitment process. Applications are welcomed from candidates of all backgrounds, experiences, and communities. We believe that diversity of thought, background, and experience contributes to better outcomes and are committed to creating an environment where everyone can develop, contribute, and build a successful career.