> Markdown version of [/jobs/ext/3562145-cyber-security-assurance-consultant-contract](https://www.wearedevelopers.com/jobs/ext/3562145-cyber-security-assurance-consultant-contract). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cyber Security Assurance Consultant - Contract

- **Company:** SR2
- **Location:** Manchester, UK
- **Contract:** Temporary contract
- **Skills:** Application Programming Interfaces (APIs), Cloud Computing Security, Cyber Security, Identity and Access Management, Secure Coding, Software Vulnerability Management, Data Lineage, Data Analytics
- **Published:** October 3, 2026
- **Apply:** https://find.jobs/jobs-near-me/apply/ats-redirect/?id=2999394780-2

## About the Role

* Cyber Security Risk & Assurance / GRC
 * Security controls testing and assurance
 * Assessing control effectiveness and residual risk
 * Cyber metrics, KRIs/KPIs and risk reporting
 * Data-driven security assurance
 * Investigating conflicting technical evidence
 * Working knowledge across several security domains such as vulnerability management, cloud security, IAM, endpoint security, secure development, third-party risk or incident management
 * Understanding structured data, APIs, data lineage and security telemetry
 * Defining acceptance criteria and supporting testing/UAT
 * Strong stakeholder management and workshop facilitation
 * Producing clear, defensible assurance and governance reporting

Relevant certifications such as CISSP, CISM, CRISC, CISA or ISO 27001 would be beneficial but aren't essential.

This would suit a hands-on Cyber Risk, Security Assurance, Technology Risk or GRC specialist who can interrogate technical evidence, challenge assumptions and clearly explain what the findings mean from a risk perspective.

## Description

The role sits between cyber security, risk, controls and data, ensuring security metrics and technical evidence provide an accurate and defensible view of control effectiveness and residual risk., You'll work with security, risk, data and technology teams to:

 * Assess the design and operating effectiveness of cyber controls
 * Review security metrics, KRIs/KPIs and underlying evidence
 * Translate technical findings into clear residual risk assessments
 * Validate security reporting against source data, risk registers, audit findings and incidents
 * Identify gaps across controls, data quality and security reporting
 * Review data lineage, security telemetry and integrations to challenge data completeness
 * Define acceptance criteria and support testing/UAT
 * Produce concise assurance findings and recommendations
 * Facilitate workshops and challenge technical and senior stakeholders constructively


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [How to Cause (or Prevent) a Massive Data Breach- Secure Coding and IDOR](https://www.wearedevelopers.com/videos/39-how-to-cause-or-prevent-a-massive-data-breach-secure-coding-and-idor)
- [Enjoying SQL data pipelines with dbt](https://www.wearedevelopers.com/videos/823-enjoying-sql-data-pipelines-with-dbt)
- [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers)
- [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)