Cyber Security Assurance Lead

As the Cyber Security Assurance Lead, you will undertake a strategic and influential role within the CISO team, providing cyber security guidance across the organisation and ensuring security is embedded into IT projects from design through to delivery. Working closely with stakeholders across Technology and the wider business, you will influence decision-making, provide expert security advice, support risk and control assessments, contribute to supplier selection and project approvals, and coordinate end-to-end penetration testing to help strengthen our security posture and manage risk effectively.

This is a unique opportunity to make a tangible impact by driving security best practices, supporting secure business change, and contributing to the resilience and future success of Post Office. You will also foster a culture of inclusion, continuous improvement and high performance across teams, delivery and decision-making. How our people behave is as important to Post Office as what is delivered. You will role model Post Office behaviours and demonstrate a Postmaster First mindset in everything you do.

Our business is changing and we understand that attracting the right talent is pivotal in driving the positive change needed, to help us achieve our ambitious goals. Beyond a competitive salary, we offer a comprehensive benefits package that includes:

• 27.5 days annual leave (rising to 30 after 2 years), plus bank holidays
• Up to 18% on target bonus opportunity
• Annual car allowance
• Generous pension scheme with minimum 10% employer contribution
• Access to 24/7 digital GP services and our Employee Assistance Programme
• 6 x Life assurance and income protection after 12 months service
• Over 400 online courses, mentoring, apprenticeships, and development programmes
• Access to our benefits platform for exclusive discounts & savings

To be successful in this role you will have:

• Proven experience in cyber assurance, risk assessment, architecture or advisory roles within complex, regulated and outsourced technology environments, including oversight of critical systems, third parties, audits and risk assessments.
• Strong knowledge of cyber security assurance principles, risk management, regulatory compliance and industry frameworks, including NCSC CAF, NIST CSF, ISO 27001, PCI DSS and OWASP.
• Broad technical expertise across cyber security technologies and controls, including cloud security (AWS and Azure), SIEM, GRC platforms, vulnerability management, network security, firewalls, VPNs, IDS/IPS, encryption and DevSecOps practices.
• Demonstrable experience leading threat modelling, penetration testing, security reviews and remediation planning, with the ability to produce and review assurance artefacts such as high-level designs, threat models, security management plans and penetration test reports.
• Strong understanding of emerging cyber threats, security trends, data protection requirements and secure delivery practices across agile and hybrid environments.
• Proven ability to build effective cross-functional stakeholder relationships, influence decision-making and communicate complex technical concepts clearly to both technical and non-technical audiences.
• Confident working independently and collaboratively in complex, multi-stakeholder environments, managing competing priorities, deadlines and project deliverables to achieve key objectives.
• Professional, detail-oriented and delivery-focused approach, with a commitment to quality, continuous improvement, equality, diversity and inclusion, and the values and principles of Post Office.

At Post Office Ltd, we’re proud to be at the heart of communities across the UK, upheld by the dedication and service of our postmasters. We offer essential services that people rely on every day, from parcels and banking to identity and government services. While we continue to evolve with digital innovation, our commitment to personal, face-to-face service remains core to who we are. Our journey is one of reflection, growth, and meaningful change. We’re looking for people who think differently. Those with resilience, purpose, and a deep sense of responsibility to our postmasters, partners and the communities they serve. If you're driven by the chance to make a real impact and help shape a future, built on progress and integrity, we’d love to hear from you.

Our commitment to embracing diversity extends beyond just words. While we’ve outlined key skills above, we recognise that great candidates come from a variety of backgrounds. We value diverse perspectives and are committed to building an inclusive workplace where everyone can thrive. As a Disability Confident Employer, we recognise the value people with disabilities can bring to our business. If you require any reasonable adjustments throughout the recruitment process or would like further details on the job description, please contact talentacquisition@postoffice.co.uk.

We’re thrilled by your interest in this opportunity and truly value every application we receive. Please note the advert may close early if we receive a high volume of applications. Unfortunately, we’re unable to provide individual feedback on all submissions.