Cyber Security Assurance Lead
Core
Leads operational delivery and reporting of Cyber Security Assurance Services, conducting controls assurance testing, metrics reporting, and providing subject matter expertise within a risk management framework.
Role type
Senior IC Cyber Security Assurance Lead
Builds
Cyber security assurance reports, dashboards, and metrics programs
Domain
Higher Education / Cyber Security Governance, Risk, and Compliance (GRC)
Deliverable
dashboards & analysis
Required skills
Cyber Security GRC principles, ISO 27001, NIST 800-53, CSA, Essential 8, PCI DSS, COBIT 5, MITRE ATT&CK, controls testing, risk register management, audit reporting, stakeholder collaboration, remediation planning, automation of assurance processes
Preferred skills
Penetration testing, vulnerability management, application security testing, source code review, CISA, CISSP, CRISC, ISO 27001 Lead Auditor
Technologies
ISO 27001, NIST 800-53, CSA, Essential 8, PCI DSS, COBIT 5, MITRE ATT&CK
Responsibilities
Conduct regular reviews of cyber security controls and perform testing to validate design and operating effectiveness; Collaborate with stakeholders to develop remediation plans and track progress; Update the cyber risk register with findings; Prepare detailed audit reports for senior management; Develop and maintain dashboards to monitor control effectiveness; Report monthly to CISO and Deputy CISO; Lead improvements to assurance methodologies and testing procedures; Support independent audits.
Seniority
Senior, hands-on IC
