Hybrid Cyber Assurance Specialist

at Civica US

• Job title: Cyber Assurance Specialist
• Job type: Full Time
• Experience level: Mid level, Senior
• Salary: Not specified
• Degree requirement: Bachelor's Degree
• Tech skills: Cloud, Cyber Security
• Location requirements: Hybrid, London, United Kingdom

About the role

• Cyber Assurance Specialist ensuring robust cyber governance and compliance for Civica's digital transformation. Safeguarding organization’s reputation and customer trust through continuous improvement of security practices.

Responsibilities

• Curate and maintain internal knowledge bases and external Trust Centre articles.
• Ensure content is accurate, accessible, and aligned with current cyber policies and standards.
• Collaborate with subject matter experts to update documentation in response to regulatory or operational changes.
• Assist in the development, review, and maintenance of cyber security policies and procedures.
• Support the Head of Cyber Governance in maintaining and improving ISO 27001 controls and other compliance frameworks (e.g., NIST, CIS).
• Support risk identification, assessment, and reporting, collaborating with risk owners and business units.
• Prepare and coordinate evidence for internal and external audits.
• Conduct assurance activities against ISO 27001 and other relevant standards.
• Maintain audit trails and track remediation of findings.
• Proactively suggest improvements to controls and processes based on lessons learnt.
• Respond to customer security questionnaires and due diligence requests.
• Support supply chain assurance activities, including supplier risk assessments and documentation.
• Maintain a repository of standard responses and evidence for reuse.
• Assist in the development and rollout of security training materials for staff.
• Support the planning and execution of phishing simulations and cyber awareness campaigns.
• Track engagement and effectiveness of awareness initiatives through metrics and reporting.
• Assist with incident response documentation and post-incident reviews.
• Develop and Maintain Cyber SharePoint sites to ensure content is current and well-organised.
• Ensure documentation is version-controlled and accessible to relevant stakeholders.
• Support the adoption and optimisation of GRC/assurance tooling (e.g., Microsoft Purview, OneTrust).
• Proactively identify and recommend improvements to controls, processes, and training.
• Build strong relationships with stakeholders across the business, IT, and external partners to ensure alignment and effective communication.

Requirements

• Extensive knowledge of cyber security governance, risk management, and compliance principles, practices, and technologies (ISO 27001, NIST, CIS, GDPR).
• Strong analytical and problem-solving skills to address complex security challenges and incidents.
• Excellent communication and interpersonal skills to collaborate effectively with various departments and senior leadership.
• Awareness of cloud security principles and controls.
• Strong written communication skills, with experience in technical writing or documentation.
• Working knowledge of ISO 27001 and other cyber security standards.
• Experience supporting audits or compliance activities.
• Familiarity with SharePoint or similar content/document management platforms.
• Ability to manage multiple tasks and prioritise effectively.
• Experience in a cyber assurance, governance, or compliance role.
• Understanding of data protection regulations (e.g., GDPR).
• Experience with phishing simulation platforms and awareness tools.
• Knowledge of risk management and supplier assurance processes.
• Experience in Microsoft Purview, UpGuard, or similar tools.
• Basic scripting or automation skills (desirable).
• Minimum three years’ experience in cyber security, with at least two years in a GRC consultancy or assurance role.
• Certifications (Desirable): CompTIA Security+, SSCP, CISA, ISO 27001 Lead Implementer/Auditor, or similar.
• Sector Experience (Desirable): Experience in regulated sectors (public sector, health, finance) is a plus.

Benefits

• 25 Days Annual Leave + bank holidays – plus the option to buy up to 10 extra days!
• Days of Difference – Up to 3 extra days off for volunteering.
• Pension Contributions – 5% employer match to support your future.
• Income Protection – Up to 75% salary cover for long-term illness.
• Life Assurance – 4x salary tax-free lump sum.
• Critical Illness Cover – £25,000 lump sum (extendable to dependents).
• Private Medical Insurance – Fast access to private healthcare.
• Health Cash Plan – Claim back physio, therapies & more.
• Dental Insurance – Cover for routine & emergency care.
• Affinity Groups – Join employee-led communities.
• Bounty Bonus – Refer a friend & get rewarded.