Security Control Assessor - REMOTE - FS - 12-month Contrac

Reference: exp sec cont_1750242649

About the Role

My client is seeking an experienced Security Control Assessor for a remote engagement. You will lead the assessment and evaluation of security controls across both on-premise and cloud environments-ensuring risk is effectively mitigated and regulatory and industry standards are met.

This role offers the chance to work in an agile environment at the forefront of information security and cloud governance, partnering with cross-functional teams and contributing to the evolution of my client's global security assurance programme.


Key Responsibilities

  • Lead design and delivery of repeatable testing methodologies for control assurance.

  • Oversee control testing across systems and processes, including automated testing for cloud.

  • Validate control effectiveness (design and operation) through structured fieldwork and documentation review.

  • Identify, document, and communicate control deficiencies with clear risk articulation and improvement recommendations.

  • Report findings to stakeholders and lead regular status updates.

  • Ensure high-quality documentation and testing accuracy through rigorous QA.

  • Drive efficiency across the control testing programme by standardising testing materials and tracking KPIs.


Skills & Experience

  • Experience in IT audit or security control assessments

  • Deep understanding of cloud environments (AWS, Azure) and associated security controls.

  • Familiar with frameworks like NIST 800-53, ISO 27001/2, COBIT, and CIS Controls.

  • Proficient in control testing tools and techniques (manual and automated).

  • Strong communicator with the ability to deliver findings to technical and non-technical stakeholders.

  • Experience with tools such as SailPoint, Rapid7, Wiz.io, MS Defender, RSA Archer, and ServiceNow.

  • Familiarity with agile methods and platforms like Jira and Kanban boards.


Desirable Qualifications

  • Professional certifications (e.g., CISA, CISSP, CISM, ISO 27001 Lead Auditor).

  • Strong data analysis skills and proficiency with tools like Excel, PowerBI, Tableau, or Alteryx.

  • Experience leveraging generative AI or automation to enhance audit/assurance work.

GCS is acting as an Employment Business in relation to this vacancy.

Negotiable

United Kingdom

Contract

Added 18/06/2025
Reference: exp sec cont_1750242649

Security Control Assessor - REMOTE - FS - 12-month Contrac

United Kingdom
Contract

Other similar jobs

Senior Control Assurance Assessor - 12 Month Contract - Remote

Added 18/06/2025

Senior Control Assurance Assessor - 12 Month Contract - Remote - Financial ServicesWhat's on offer:12-month contract with potential for extensionFully remote working modelWork with an experienced team on critical security assurance programsExposure to advanced security technologies, automation, and AI-driven testingWe are working with a major financial services organisation to find an experienced Senior Control Assurance Assessor for an initial 12-month contract. This role is fully remote, offering the chance to work on meaningful security programs within a dynamic, high-performing environment.Role Overview: As a Senior Control Assurance Assessor, you will play a key role in ensuring that security both on-prem and...

Learn more

Lead Security Control Assesor

Added 18/06/2025

As a Lead Security Control Assessor, you will be responsible for leading the assessment and evaluation of security controls across systems and processes both on-premise and in the cloud, to ensure they effectively mitigate risks and comply with regulatory and industry standards. You will oversee and conduct security control testing, to verify the design, implementation, and operational effectiveness of controls. In this role, you will work in an agile environment, ensuring the quality of security assessments through thorough testing, automation, and collaboration with cross-functional teams and various stakeholders. Summary of Primary ResponsibilitiesDesign and deliver repeatable testing methodologies to support control...

Learn more

Security Controls Assessor

Added 18/06/2025

About the RoleMy client is seeking an experienced Lead Security Control Assessor for a remote engagement. You will lead the assessment and evaluation of security controls across both on-premise and cloud environments-ensuring risk is effectively mitigated and regulatory and industry standards are met.This role offers the chance to work in an agile environment at the forefront of information security and cloud governance, partnering with cross-functional teams and contributing to the evolution of Experian's global security assurance programme.Key ResponsibilitiesLead design and delivery of repeatable testing methodologies for control assurance.Oversee control testing across systems and processes, including automated testing for cloud.Validate control...

Learn more

Senior DevOps Engineer - JFrog Artifactory SME - fully remote

Added 06/06/2025

Senior DevOps Engineer - JFrog Artifactory SME - 6 month contract - Fully remote6 month contract - Fully remote About the RoleWe're looking for a Senior DevOps Engineer with deep expertise in JFrog Artifactory to join our growing DevOps team. This role is ideal for someone who thrives in high-availability environments and has hands-on experience architecting and managing active-active HA clusters, federated repositories, and edge nodes in a single-domain setup.You'll be our go-to SME for everything JFrog, working closely with engineering, security, and release teams to ensure efficient artifact management, developer enablement, and policy enforcement across our CI/CD pipelines. Key...

Learn more

C# API Developer - Remote

Added 06/06/2025

Role - C# / API DeveloperDuration - 3 months with very likely extensionLocation - RemoteRate - £500 per day (Inside IR35)Tech C#, .NET/.NET Core/ .NET FrameworkExperience with REST APIsAbility to work with SQL query syntax with SQL Server and OracleTo create technical specifications and test plansProvide technical support for web, desktop or mobile applications, upgrading, configuring and debugging existing systemExperience with popular web application frameworksTo investigate and develop skills in new & emerging technologies Tasks Ability to work independently or within teams across a multi system, multidiscipline environment with an excellent attention to detail whilst delivering high quality output within...

Learn more

Typescript Developer- Datadog, Fully remote, outside IR35

Added 27/05/2025

TypeScript Developer with Datadog Expertise Outside IR35Fully remote Role Summary: My client is hiring a fully remote TypeScript developer who can enhance their system observability by improving monitoring and alerting using Datadog. This role focuses on building robust, actionable alerts and creating insightful dashboards to proactively identify issues and improve system reliability.Key skills:Strong TypeScript development skillsHands-on experience with Datadog APM, Logs, Metrics, Dashboards, and Alerting.Ability to write and maintain complex Datadog monitors (threshold, anomaly detection, composite monitors).Develop and maintain TypeScript applications with observability in mind.Instrument backend and frontend applications to generate meaningful metrics, logs, and traces.Design and implement effective Datadog...

Learn more

SQL Engineer- Postgres, AlloyDB, DBaas- fully remote

Added 09/04/2025

SQL Engineer Fully RemoteDBaas, AlloyDB, Postgres As a market leader in the data analytics space my client is seeking a highly skilled SQL Engineer to join their dynamic team and lead the migration of their database systems to cloud, DBaas utilising Postgres, AlloyDBRole Overview:As a SQL Engineer specializing in database migration, you will play a critical role in transforming their data infrastructure. Your expertise in PostgreSQL and AlloyDB will be essential as you design, plan, and execute the migration process. This is a unique opportunity to work on a high-impact project that will shape the future of their data management...

Learn more

Java Software Engineer (98% Remote)

Added 26/03/2025

Job Title: Java Software EngineerWork Model: Remote-first, with quarterly onsite visits to DublinSalary: upto €75K + Benefits include 25 paid holiday, life insurance, full healthcare, 5% pension contributions and a big list of additional perks Join a team focused on enhancing a leading online marketplace that reaches millions of users. This role offers the chance to do impactful work and be part of a dynamic environment.(Heavy focus on APIs, integrations, and cloud-based architecture) Responsibilities:Building and maintaining features and products.Ensuring a clean, scalable, and secure codebase.Develop and maintain REST APIs and microservices.Implement cloud-based solutions (AWS preferred).Work with relational and non-relational databases...

Learn more

Cyber Security Project Manager - PAM

Added 18/06/2025

Cyber Security Project Manager - PAM Transformation | Financial Services Duration: 6 months rollingRate: Up to £650/day (Inside IR35)Location: Hybrid in Sheffield A leading Financial Services organisation is seeking a skilled Cyber Security Project Manager who has experience delivering successful PAM Projects.Interview slots next week!Ideal Candidate:-Strong background in cyber security project delivery, particularly PAM-Experience in Financial Services or other regulated industries-Excellent stakeholder management To find out more, please apply now or drop an email with a copy of your CV to [email protected] is acting as an Employment Business in relation to this vacancy.

Learn more

Senior Information Security Administrator

Added 10/06/2025

My client is hiring an Information Security Lead to help shape and implement its cybersecurity operations, governance, and risk framework. Reporting to the IT Operations & Security Manager, this role is critical in maintaining the organisation's security posture, ensuring compliance, and supporting ongoing IT service resilience.Key ResponsibilitiesOversee third-party security tools and services (e.g. firewalls, IDS/IPS, endpoint protection) and monitor vendor SLA adherence.Conduct risk assessments, maintain the security risk register, and manage remediation activities.Lead incident response processes including detection, containment, investigation, and resolution.Develop, implement, and maintain information security policies, procedures, and standards.Ensure compliance with ISO 27001, NIS2, and other regulatory requirements;...

Learn more

Senior Information Security Advisor

Added 10/06/2025

My client is looking for a Senior Information Security Advisor to deliver technical information security services to clients across Europe. This role focuses on improving client security posture through risk management, policy development, compliance assessments, and training. You will also support internal initiatives, mentor junior colleagues, and contribute to my clients security leadership.Key Responsibilities * Lead delivery of information security services to clients, including risk identification, remediation, and compliance with regulatory and data protection standards. * Develop, implement, and review security policies, frameworks, and operational procedures. * Conduct ISMS assessments, internal audits, and compliance gap analyses against recognised standards. *...

Learn more

Cyber Security Governance and Reporting Lead

Added 10/06/2025

A large national organisation is seeking to recruit a Cyber Security Governance and Reporting Lead. This role is responsible for ensuring that cybersecurity policies, frameworks, and compliance requirements are effectively implemented and monitored across the enterprise. The successful candidate will be central to driving governance, improving performance reporting, and ensuring regulatory compliance in cybersecurity initiatives.Key Responsibilities:Enhance existing cybersecurity KPIs and reporting structures to evaluate program effectiveness.Define and monitor cybersecurity performance indicators for third-party vendors.Work collaboratively across departments and with external partners to uphold cybersecurity compliance.Create and revise cybersecurity policies as required.Conduct risk assessments to identify and address security vulnerabilities.Lead internal...

Learn more

Cyber security Business Analyst

Added 06/06/2025

A great opportunity for a Business Analyst with cybersecurity experience to join a fast-paced IT environment. This role involves working closely with security and architecture teams to support the delivery of key cybersecurity initiatives.Key ResponsibilitiesGather and document business and technical requirements for cybersecurity projects.Map business processes, identify vulnerabilities, and recommend security improvements.Create clear, standardised documentation (e.g., requirements, process maps, test scripts).Collaborate with IT, security, and business teams to align on goals.Support risk assessments, compliance audits (ISO 27001, NIST, GDPR), and user testing.Contribute to governance activities such as template development and benefit tracking.Requirements3+ years' experience as a Business Analyst, ideally in...

Learn more

Training & Engagement Lead - Cyber Security

Added 06/06/2025

We're hiring a dynamic professional to lead our Cyber Security Training, Awareness, and Business Engagement initiatives. This role focuses on educating employees, building a security-first culture, and strengthening collaboration across the business.You don't need to be a cybersecurity expert-strong communication, stakeholder engagement, and training experience are key. Cyber knowledge or some exposure in creating cyber training or awareness program would be great. Job Title: Training & Engagement Lead - Cyber SecurityLocation: Dublin, Ireland (Hybrid)Type: Full-time, Permanent Key Responsibilities:Design and deliver engaging security training (e-learning, workshops, phishing simulations).Create annual awareness plans aligned to risk and compliance needs.Partner with HR, IT, and...

Learn more

Senior Cyber Security Engineer

Added 06/06/2025

As a Senior Cyber Security Engineer, you will play a key role in supporting the design, implementation, and maintenance of Cyber Security Engineering solutions, controls, and processes across IT and OT environments. You will be responsible for supporting cyber security platform administration, enhancing our security posture, and ensuring that new capabilities are securely deployed in alignment with business objectives. This includes collaborating with stakeholders, supporting compliance efforts, and helping to drive proactive cyber risk reduction.This role requires a deep understanding of security engineering concepts, infrastructure technologies, and best practices. The ideal candidate will have strong communication skills, a solid grasp...

Learn more
Required for two factor authentication
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB