Security Assurance Specialist

Role overview

Responsibilities

• Independently assess security controls, remediation activity, and supporting evidence.
• Evaluate control design, implementation, and operating effectiveness.
• Identify evidence gaps and communicate required actions to control owners.
• Maintain clear, auditable assurance records and defensible conclusions.
• Support risk reassessment and security readiness across transformation and hypercare phases.
• Identify recurring control weaknesses and escalate material findings.
• Assess controls against relevant security policies, standards, and frameworks.
• Work with GRC, security, and wider technology teams to support ongoing assurance.

Experience and knowledge

• Strong background in information security assurance, technology risk, IT audit, or GRC.
• Experience assessing security control design and effectiveness.
• Strong understanding of ISO 27001 and NIST CSF.
• Practical knowledge in areas such as IAM, access governance, vulnerability management, network security, resilience, supplier security, data protection, or security operations.
• Experience reviewing technical and governance evidence and producing clear assurance conclusions.

Desirable experience and certifications

• SAP/ERP transformation experience is advantageous.
• CISSP, CISM, CISA, CRISC, ISO 27001 Lead Auditor/Implementer, or equivalent certification is desirable.