Information Security Assurance Manager

Information Security Assurance Manager

Permanent Role

Hybrid from our Wimbledon Office

 

About the Role

 

This is an exciting opportunity for a D&G colleague to take the next step in their security, risk or assurance career and play a key role in shaping the future of Information Security Assurance at Domestic & General.

 

We're looking for an experienced risk management or assurance professional to lead our Information Security Assurance function and help shape how we manage and govern security risk across the business.

 

This role provides an opportunity to build on the strong foundations already in place while supporting continued growth, transformation and expansion. You'll work closely with colleagues across Technology, Cyber Security, Risk and the wider business, providing independent oversight and assurance across key security activities.

 

Your focus will include vulnerability management, third-party security assurance, risk governance, risk acceptance and security architecture assurance. You'll help ensure security risks are understood, appropriately managed and owned by the right stakeholders, while supporting the business to make informed and balanced decisions.

 

Key responsibilities include:

 

• Leading and developing a small Information Security Assurance team.
• Driving the continued maturity of our security assurance framework.
• Overseeing vulnerability remediation, risk acceptance and exception management.
• Leading third-party and supplier security assurance activities.
• Providing assurance and constructive challenge on security controls and architecture decisions.
• Supporting audits, regulatory reviews and control assessments.
• Producing insightful risk and assurance reporting for senior leaders and governance forums.
• Partnering with stakeholders across the UK and US to embed consistent security assurance practices.
• Influencing and challenging stakeholders to ensure risks are effectively understood and addressed.

 

About You

 

You'll be a proven Information Security Assurance, Cyber Risk, GRC or Security Governance professional with a strong understanding of risk, controls and security assurance.

 

Just as importantly, you'll be someone who builds trusted relationships, communicates effectively and can influence outcomes through collaboration and constructive challenge. Success in this role will be defined less by deep technical security expertise and more by your ability to assess risk, provide effective assurance, influence stakeholders and build strong relationships across the business.

 

It is likely you will be able to demonstrate experience in a number of the below areas.

 

• Information Security Assurance, Cyber Risk, GRC, Assurance or Security Governance.
• Security risk management and control assurance.
• Vulnerability governance and remediation oversight.
• Third-party or supplier security assurance.
• Audit, compliance and regulatory engagement.
• Risk acceptance and security governance processes.
• Producing reports and insights for senior stakeholders.
• Leading, coaching or mentoring others.

 

You'll be comfortable working across both technical and business teams, balancing risk management with commercial priorities and helping colleagues navigate complex security decisions. Most importantly, you'll be someone who enjoys bringing clarity to risk, driving accountability and helping ensure security remains an enabler of business success.