Security Assurance Lead

Salary: £70,000 - 70,000 per year

Requirements:

• We are looking for someone with at least 5 years experience in security testing and assurance.
• We need a strong understanding of information security principles, emerging threats, best practices, compliance frameworks such as ISO 27001 and NIST, and risk management practices.
• We require a degree in Computer Science or equivalent experience.
• We require relevant professional qualifications, including CISSP and accredited security testing.
• We need proven experience developing and managing security risks and mitigations within medium to large organisations.
• We need strong stakeholder management experience.
• We need excellent communication and presentation skills, with the ability to influence at all levels of the organisation.
• We need strong analytical skills to measure the effectiveness of vulnerability management plans.
• We need someone who is self-motivated, proactive, and able to manage multiple projects simultaneously.
• Desirable: experience developing and maintaining a supply chain risk register within a similar-sized organisation.
• Desirable: hands-on experience using AI applications and tooling, including Microsoft Copilot and Claude.
• Desirable: experience using and deploying penetration testing and vulnerability management tools such as Tenable within complex infrastructure.
• Desirable: experience reporting risks to senior leadership.

Responsibilities:

• We will have you lead security assurance activity across attack surface management, vulnerability management, penetration testing, and security posture improvement.
• We will have you work with technology and security teams to identify, assess, and remediate vulnerabilities across systems, applications, cloud services, and infrastructure.
• We will have you develop and maintain security policies, standards, and guidance that support effective assurance testing and secure delivery.
• We will have you support risk assessments, supplier security reviews, and risk register management, ensuring risks are clearly understood, tracked, and reported.
• We will have you contribute to security governance, compliance activities, and external assessments, including alignment with frameworks such as ISO 27001 and NIST.
• We will have you use threat intelligence, testing outcomes, and assurance data to shape priorities, improve resilience, and inform senior stakeholders.
• We will have you support incident preparedness, including investigations and exercises that test our ability to respond effectively.
• We will have you help shape our security strategy, monitor emerging threats and intelligence, and identify opportunities to strengthen our approach through security automation.

Technologies:

• AI
• Cloud
• Copilot
• Support
• Security
• Embedded
• MS Teams

More:

We are Cambridge University Press & Assessment, a world-leading academic publisher and assessment organisation and a proud part of the University of Cambridge. This is a permanent Security Assurance Lead role based in Cambridge on a hybrid basis, with a minimum of two days a week in the office and typically 40-60% of time spent face to face at our dedicated location. We offer a collaborative environment, a world-class flexible rewards package, and benefits including 28 days annual leave plus bank holidays, private medical and permanent health insurance, a discretionary annual bonus, a group personal pension scheme, life assurance up to 4x annual salary, and green travel schemes. We are committed to equality, inclusion, accessibility, and flexible working, and we support a mission-driven culture where people can grow, speak up safely, and develop their careers.

last updated 33 week of 2026