* Salary: Up to £65,000 per annum
* Hybrid: 3 days per week onsite in Portsmouth
* Essential skills: NIST, SOC, Crest, 27001
About the Role and Client
Join a leading IT Services and Consulting firm as a Cyber Security Assurance Manager to ensure their SOC meets and maintains top security certifications and assurance standards. As part of the GRC function, you'll lead customer assurance activities, manage external audits, and oversee key certifications such as ISO 27001, SOC2 Type II, Cyber Essentials Plus, and Crest SOC accreditation.
Key Responsibilities
* Lead the delivery and ongoing maintenance of key SOC-related certifications including SOC 2 Type II, SOC 3, ISO/IEC 27001, Cyber Essentials Plus, and Crest.
* Embed certification requirements into the SOC's governance, processes, and operational practices.
* Act as primary contact for customer assurance activities relating to SOC services.
* Support client RFIs, RFPs, and audit requests with accurate certification evidence and security documentation.
* Monitor developments in global cybersecurity regulations and frameworks (eg NIST CSF, UK NCSC guidance, EU NIS2, GDPR).
* Drive continuous improvement in SOC assurance processes, reducing time to audit readiness and increasing efficiency of evidence collection.
* Work closely with SOC operations, Information Security, Risk & Compliance, and Commercial teams to embed assurance requirements into daily practice.
Essential Qualifications & Requirements
* Demonstrable experience delivering and maintaining cybersecurity certifications (ISO/IEC 27001, SOC 2 Type II, Cyber Essentials Plus, Crest).
* Strong understanding of SOC operations and security assurance frameworks.
* Experience in customer-facing assurance activities, including audits, RFIs, and RFPs
* In-depth knowledge of NIST CSF, GDPR, and UK NCSC guidance.
* Experience liaising with external auditors, regulators, and certification bodies.
* Strong ability to develop and maintain compliance documentation and audit evidence.
* Proven organisational skills managing multiple certifications and assurance projects simultaneously.
Services offered by Computappoint Limited are those of an Employment Business and/or Employment Agency in relation to this vacancy.