This is a fantastic opportunity to join Tesco s Cyber Assurance team as an individual contributor, part of the wider Cyber Risk function
The Cyber Assurance Team is our second line in Technology working with stakeholders to ensure the implementation of proportionate controls to mitigate Tescos cyber risk exposure
You will be responsible for
- Carry out Cyber Assurance initiatives independently while ensuring quality and timely delivery
- Perform risk-based control testing across security domains using security frameworks (eg, ISO 27001, NIST CSF, CIS) to determine control effectiveness and provide implementable recommendations
- Review and validate evidence provided by Technology teams as part of control assurance activities, ensuring completeness and compliance with regulatory and industry standards
- Collaborate with Security and Technology teams to drive remediation of identified control gaps and ensure implementation of cyber security safeguards to improve security posture across the organisation
- Drive compliance programs such as GDPR, NIS2 and PCI DSS etc, including gap assessments, evidence reviews, and reporting
- Drive reporting across different Cyber Assurance initiatives, including reporting to Security Leadership and Cyber/Technology governance committees
- Identify, drive,
and implement opportunities for process improvement across various initiatives within the Cyber Assurance team
- Build strong relationships with the stakeholders and lead meetings with Technology and Business Process teams
- Stay updated on evolving regulatory requirements and industry best practices and provide insights to management to continuously enhance the organisation s assurance posture
You will need
- 7 to 10 years cyber security experience
- IT control testing, control assurance and IT risk management
- Experience of assessing security controls across a variety of technologies and products, recommending improvements where necessary
- Critical thinking with strong attention to detail and good organisational skills
- Solid written, verbal communication, documentation and presentation skills, working with all levels of seniority and disciplines within the organisation
- Able to build solid working relationships with internal and external stakeholders
- At least one professional qualification such as CompTIA Security+, CISSP, CISM, CRISC or equivalent
Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.