Senior Cyber Security Portfolio Assurance Analyst

Job Purpose

Senior Cyber Security Portfolio Assurance Analyst

Senior Cyber Security Portfolio Assurance Analyst

In This Role, You Will

• Perform cyber security assurance assessments across Cloud ERP, enterprise SaaS, and public cloud platforms.
• Assess the design and effectiveness of cloud and application security controls across cloud environments
• Provide assurance that cloud platforms and applications comply with internal cyber security standards, regulatory requirements, and audit expectations.
• Review solution designs, configurations, and security artefacts to identify control gaps, security risks, and non‑compliance, recommending pragmatic remediation actions.
• Provide security assurance input into Cloud ERP and enterprise technology programmes, supporting secure‑by‑design and risk‑based decision making.
• Work closely with Cloud, ERP, and application teams to validate controls covering identity and access management, data protection, logging and monitoring, network security, and resilience.
• Track and manage security findings, risks, and remediation actions, escalating material risks where required through established governance forums.
• Support engagement with Internal Audit, Risk, and external assessors, providing evidence and assurance artefacts as required.
• Contribute to the ongoing improvement of cyber security assurance frameworks, standards, and assessment methodologies for cloud and SaaS platforms.

Qualification

• To be considered for this role, you must meet the below requirements:
• Degree or Honours (12+3 or equivalent) in Information Security, Computer Science, Engineering, or a related discipline.
• 3+ years of experience in cyber security assurance, risk, or control assessment within large enterprise technology environments.
• Proven expertise in cloud security, with hands‑on knowledge of one or more public cloud platforms
• Strong understanding of cloud and application security controls, including identity and access management, data protection, encryption, logging and monitoring, network security, and secure configuration.
• Experience ensuring compliance with internal cyber security standards, regulatory obligations, and audit requirements.

Salary & Benefits