Cyber Security Assurance Manager

Summary: The Cyber Security Assurance Manager role at Network Rail is a 6-month hybrid contract based in York, focusing on managing and delivering security assurance activities. The position involves conducting security surveys, audits, and risk assessments to ensure compliance with regulatory and organizational standards. The manager will also collaborate with external assurance providers and promote security awareness within the organization. This role is integral to maintaining Network Rail's commitment to security and compliance in its operations.

Key Responsibilities:

• Management and delivery of security assurance activities, conducting security surveys, audits, verifications, and self-assurance assessments in accordance with the NR assurance framework.
• Support the delivery of the security assurance plan to demonstrate compliance with regulatory, legal, and Network Rail standards and risk processes.
• Manage and conduct security threat and risk assessments to identify control failures and deliver security risk management aligned to the NR security assurance framework.
• Support the Security Assurance Manager to collaborate with government-sponsored and external assurance providers to maintain compliance with Network Rail adopted security assurance certifications and standards.
• Support the Security Assurance Manager in maintaining security standards, policies, and procedures and promoting security awareness and training to the wider business.
• Implementing audit recommendations.

Key Skills:

• Experience in cyber security assurance and risk management.
• Knowledge of security standards, policies, and procedures.
• Ability to conduct security audits and assessments.
• Strong communication and collaboration skills.
• Understanding of regulatory and legal compliance in the context of security.
• Experience in managing security assurance activities.

Salary (Rate): undetermined

City: York

Country: UK

Working Arrangements: hybrid

IR35 Status: inside IR35

Seniority Level: undetermined

Industry: IT