Information Security Technical Assurance Lead in City of Westminster

Requirements

• We need proven experience working in a global organisation and delivering against the responsibilities of this role.
• We need a degree in Computer Science, Information Security, or a related discipline, or equivalent industry experience.
• We need one or more relevant cybersecurity certifications, such as CISSP, CISA, CSSLP, GWAPT, GCSA, CASE, or Certified Dev Sec Ops Professional.
• We need strong familiarity with OWASP, including Top 10 and ASVS.
• We need at least 5 years of experience in information security assurance, with a strong focus on application security.
• We need hands‑on experience with information security frameworks and regulatory compliance, such as ISO 27001 and the NIT SP 800 series / Cybersecurity Framework.
• We prefer knowledge of regulatory requirements within the nuclear industry across the United States, United Kingdom, Netherlands, and Germany.
• We prefer understanding of government security classifications and associated handling requirements.
• We require the successful candidate to obtain and maintain SC clearance.

Responsibilities

• We produce and review technical security documentation to support secure solution delivery.
• We partner with business stakeholders to understand requirements and embed strong security practices across initiatives.
• We act as trusted advisors and security advocates, promoting a security‑first culture across the organisation.
• We review technical designs against security standards and policies, identify gaps, and recommend improvements to controls.
• We provide assurance across both on‑premises and cloud environments to ensure consistent security coverage.
• We collaborate with GRC teams, security architects, and business stakeholders to conduct risk assessments, define mitigations, and document outcomes.
• We work closely with IT teams to validate and assure the effectiveness of technical controls against identified threats.
• We translate business strategy and requirements into secure architectural approaches, clearly communicate risk, and enable appropriate control solutions.
• We conduct supplier assurance activities across on‑premises, cloud, and hybrid services, providing clear, actionable recommendations.
• We develop and maintain application security policies, standards, and guidelines.
• We ensure alignment between security frameworks, architectural standards, and overall business strategy.
• We stay current with emerging threats, technologies, and industry best practices to continuously enhance our security posture.
• Technologies
• Cloud
• Dev Sec Ops
• Support
• OWASP
• Security
• ASP. NET
• Web
• More

We are Urenco, a global leader in low carbon energy and a company working at the cutting edge of the transition to a sustainable, net zero world.

This is a hybrid role based at our Paddington Head Office, with a minimum expectation of two days per week in our London office and occasional travel as needed.

You will join our CISO function and Cyber Security Assurance team, where we focus on strengthening our cyber security capabilities to protect our business, customers, and the wider public while supporting the safe and sustainable use of nuclear technology.

We offer market‑leading training and development, mentoring and coaching from industry experts, and a strong benefits package including 27 days of annual leave, a generous bonus scheme, family‑friendly policies, pension contributions, hybrid working, flexible hours, flexible benefits, paid volunteering time, and private medical and dental insurance.

We are committed to diversity, inclusion, and creating an environment where every voice is heard.

• last updated 33 week of 2026
• #J-18808-Ljbffr