> Markdown version of [/jobs/ext/2311059-cyber-assurance-specialist](https://www.wearedevelopers.com/jobs/ext/2311059-cyber-assurance-specialist). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cyber Assurance Specialist - **Company:** Civica - **Location:** Manchester, UK - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Cloud Computing Security, CompTIA Security+, Cyber Security, Document Management Systems, Information Management, Knowledge Management, Phishing, Microsoft SharePoint, Scripting - **Published:** August 30, 2026 - **Apply:** https://www.collegerecruiter.com/job/2815501814-cyber-assurance-specialist ## About the Role * Extensive knowledge of cyber security governance, risk management, and compliance principles, practices, and technologies (ISO 27001, NIST, CIS, GDPR) * Strong analytical and problem-solving skills to address complex security challenges and incidents * Excellent communication and interpersonal skills to collaborate effectively with various departments and senior leadership * Awareness of cloud security principles and controls * Strong written communication skills, with experience in technical writing or documentation * Working knowledge of ISO 27001 and other cyber security standards * Experience supporting audits or compliance activities * Familiarity with SharePoint or similar content/document management platforms * Ability to manage multiple tasks and prioritise effectively * Experience in a cyber assurance, governance, or compliance role * Understanding of data protection regulations (e.g., GDPR) * Experience with phishing simulation platforms and awareness tools * Knowledge of risk management and supplier assurance processes * Experience in Microsoft Purview, UpGuard, or similar tools * Basic scripting or automation skills (desirable), * Minimum three years' experience in cyber security, with at least two years in a GRC consultancy or assurance role * Certifications (desirable): CompTIA Security+, SSCP, CISA, ISO 27001 Lead Implementer/Auditor, or similar * Sector experience (desirable): Experience in regulated sectors (public sector, health, finance) is a plus ## Description The Cyber Assurance Specialist plays a vital role in safeguarding the organisation's reputation and customer trust by ensuring robust cyber governance, compliance, and the continuous improvement of security practices. This position enables secure business growth and supports the organisation's digital transformation., The Cyber Assurance Specialist supports the organisation's cyber assurance and governance activities by maintaining key documentation, assisting with audits and due diligence, and contributing to awareness and training initiatives. The role is pivotal in ensuring the organisation's security posture remains transparent, compliant, and continuously improving., Documentation & Knowledge Management * Curate and maintain internal knowledge bases and external Trust Centre articles * Ensure content is accurate, accessible, and aligned with current cyber policies and standards * Collaborate with subject matter experts to update documentation in response to regulatory or operational changes Policy, Risk & Governance Support * Assist in the development, review, and maintenance of cyber security policies and procedures * Support the Head of Cyber Governance in maintaining and improving ISO 27001 controls and other compliance frameworks (e.g., NIST, CIS) * Support risk identification, assessment, and reporting, collaborating with risk owners and business units Audit & Assurance Activities * Prepare and coordinate evidence for internal and external audits * Conduct assurance activities against ISO 27001 and other relevant standards * Maintain audit trails and track remediation of findings * Proactively suggest improvements to controls and processes based on lessons learnt Customer & Supply Chain Due Diligence * Respond to customer security questionnaires and due diligence requests * Support supply chain assurance activities, including supplier risk assessments and documentation * Maintain a repository of standard responses and evidence for reuse Cyber Awareness & Training * Assist in the development and rollout of security training materials for staff * Support the planning and execution of phishing simulations and cyber awareness campaigns * Track engagement and effectiveness of awareness initiatives through metrics and reporting Incident Response Support * Assist with incident response documentation and post-incident reviews SharePoint & Information Management * Develop and maintain Cyber SharePoint sites to ensure content is current and well-organised * Ensure documentation is version-controlled and accessible to relevant stakeholders ## Related Videos - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java) - [Passkeys: Truly Phishing-Resistant? Implementation and Pitfalls](https://www.wearedevelopers.com/videos/100156-passkeys-truly-phishing-resistant-implementation-and-pitfalls) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk)