Security Assurance Lead

Salary: £42,000 - 76,000 per year

Requirements:

• Proven experience working in cyber security, with experience in security consulting, application security, product security or security engineering.
• Experience partnering with delivery teams to provide security guidance throughout project and programme lifecycles.
• Excellent communication and stakeholder management skills, with the ability to build credibility and influence both technical and business audiences at all levels.
• The ability to balance competing priorities while working across multiple projects and initiatives.
• Experience conducting threat modelling, producing Data Flow Diagrams and applying methodologies such as STRIDE.
• Experience carrying out security assurance activities, including solution reviews, security assessments, configuration reviews and security hardening.
• Experience coordinating penetration testing activities and managing the remediation of identified vulnerabilities.
• A good understanding of Secure by Design principles and the ability to apply them throughout solution delivery.
• Experience identifying, assessing and prioritising security risks, providing pragmatic recommendations that align with business objectives and the organisations risk appetite.
• Good working knowledge of recognised security frameworks and standards such as NIST or ISO27001, along with industry best practice.
• Experience working with cloud technologies, particularly AWS and Azure, and a good understanding of cloud native security controls and services.
• Experience working alongside engineering teams to design and implement security controls and improvements across applications, infrastructure and cloud environments.
• An understanding of CI/CD pipelines, secure software delivery practices and modern application development approaches.
• A collaborative approach and a can-do attitude with a willingness to share knowledge, mentor colleagues and contribute to the continual improvement of the Information Security function.
• A recognised security certification such as CISSP would be advantageous, although equivalent experience and a commitment to continued professional development are equally valued.

Responsibilities:

• Act as the primary Information Security point of contact for a portfolio of projects within the Sustainability & Business Change Programme (SBC), providing security consultancy that enables successful business delivery and security governance.
• Build trusted relationships with stakeholders across Technology and the wider business, offering clear, risk based security advice throughout the project lifecycle.
• Support Business Analysts and delivery teams in defining security activities, identifying security requirements and embedding Secure by Design principles from the earliest stages of delivery.
• Operate and continue improving the Information Security Front Door, helping establish a consistent and effective engagement model for accessing security services across the organisation.
• Facilitate threat modelling workshops, produce Data Flow Diagrams and carry out structured threat assessments using the STRIDE methodology.
• Conduct security assurance activities across new and existing services, including architecture and design reviews, configuration assessments, security hardening reviews and production security assessments.
• Prioritise, design and resolve the findings of threat models and security assurance assessments.
• Coordinate penetration testing activities, review findings with technical teams and ensure remediation plans are agreed, prioritised and tracked.
• Assess implementation plans, technical designs and solution architectures, providing practical recommendations that balance security, delivery and operational requirements.
• Work with AppSec, CloudSec, platform engineering and delivery teams where initiatives impact products, AWS and Azure services, helping identify app and cloud security considerations and ensuring specialist expertise is engaged where required.
• Collaborate with Security Operations, Identity, IT Continuity and other Information Security teams to deliver consistent security outcomes across programmes and operational services.
• Identify, assess and prioritise security risks arising from reviews, threat modelling and assurance activities, ensuring they are managed appropriately through to resolution.
• Promote security awareness and encourage secure engineering practices, helping delivery teams understand security requirements without creating unnecessary barriers.
• Contribute to the ongoing improvement of security standards, patterns, guidance and processes, ensuring they remain aligned with industry best practice and organisational objectives.
• Mentor colleagues where appropriate and help improve the wider Security Business Consulting capability.

Technologies:

• AWS
• Azure
• CI/CD
• Cloud
• Flow
• Support
• Security
• Embedded
• Network

More:

We are Motability Operations, a unique organisation that combines a strong sense of purpose with a commercial edge to provide worry-free mobility solutions to over 800,000 customers and their families across the UK. We are the largest car fleet operator in the UK, working with around 5,000 car dealers and all major manufacturers, and we pride ourselves on outstanding customer service with a customer satisfaction rating of 9.8 out of 10. This role sits within our Application Security team, part of a wider Information Security function of around 40 professionals, supporting the Sustainability & Business Change programme. We offer hybrid working across the UK, with up to 2 days per week remote, and provide a comprehensive benefits package including annual discretionary bonus, pension, life assurance, employee discounts, medical cover, wellbeing support, volunteering time, and other voluntary benefits. We are an inclusive employer, committed to diversity, accessibility, and flexible working where possible.

last updated 39 week of 2026