Назад
Company hidden
2 дня назад

Cyber Security Audit & Assurance Specialist (Cybersecurity)

Формат работы
hybrid
Тип работы
fulltime
Грейд
middle
Английский
b2
Страна
UK
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Cyber Security Audit & Assurance Specialist (Cybersecurity): Delivering cyber security audits and assurance assessments across customer and internal environments with an accent on Cyber Essentials, Defence Cyber Certification, NIST CSF, and ISO 27001 compliance. Focus on reviewing technical evidence, producing defensible reports, identifying security gaps, and supporting vulnerability assessments and security improvements.

Location: St Neots, Cambridgeshire, United Kingdom; hybrid. The role requires UK nationality, eligibility to work in the UK, and eligibility to obtain and maintain UK Government Security Clearance (SC).

Company

hirify.global provides cyber security assurance and related security services that help customers manage risk, achieve compliance, and maintain trusted, resilient systems.

What you will do

  • Deliver Cyber Essentials and Cyber Essentials Plus assessments in line with scheme requirements.
  • Lead smaller cyber assurance engagements, including Defence Cyber Certification assessments, and support larger DCC and NIST Cybersecurity Framework engagements.
  • Review technical and documentary evidence against security requirements and produce clear reports covering findings, observations, and recommendations.
  • Support customers and stakeholders in addressing security gaps and maintain compliance with internal policies and ISO 27001 certification requirements.
  • Monitor security tooling and support the investigation or escalation of security events.
  • Contribute to vulnerability assessments, penetration testing activities, technical security reviews, assurance process improvements, and wider security initiatives.

Requirements

  • At least 3 years of experience in cyber security, governance, compliance, or assurance, including experience supporting or delivering security audits, compliance assessments, and cyber assurance activities.
  • Experience with Defence Cyber Certification, DefStan 05-138, Cyber Essentials, and the NIST Cybersecurity Framework.
  • Strong written and verbal communication skills, with the ability to conduct robust technical and documentary evidence reviews and translate findings into clear, defensible assessment reports.
  • Working knowledge of IT infrastructure, networking, security technologies, and vulnerability management concepts.
  • Current ISO 27001 Lead Auditor qualification or the ability to achieve it within one year of employment.
  • Commitment to maintaining and developing professional cyber security certifications.
  • Must be a UK National, eligible to work in the UK, and eligible to obtain and maintain UK Government Security Clearance (SC).

Nice to have

  • Cyber Essentials or Cyber Essentials Plus Assessor qualification.
  • Experience supporting vulnerability assessments or penetration testing engagements.
  • Knowledge of ISO 27001 implementation and continual improvement activities.
  • CompTIA Security+, ISC2 Certified in Cybersecurity (CC), or a similar industry certification.
  • Experience in defence, government, or other highly regulated environments.

Culture & Benefits

  • Permanent hybrid position with a collaborative cyber security team and career development support.
  • 25 days of annual leave, including up to 3 days of Christmas shutdown, with the option to buy or sell up to 5 additional days.
  • Annual wellbeing allowance, wellbeing resources, and employee assistance programmes.
  • Two pension schemes, private medical insurance, life assurance up to 4x salary, and a Share Save scheme.
  • Electric or hybrid car leasing, cycle-to-work scheme, and retail discounts.

Будьте осторожны

Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →