[Hiring] Security Testing and Assurance Manager @Public Sector Resourcing

Role Description

On behalf of Companies House, we are looking for a Security Testing and Assurance Manager for a 6 month contract based remotely. SC Clearance is an essential requirement for this role; as a minimum, you must be willing & eligible to undergo checks.

As a Security Testing and Assurance Manager, your main responsibilities will be:

• Lead the planning, coordination, and delivery of security testing across applications, APIs, cloud platforms, networks, and infrastructure.
• Manage relationships with internal and external penetration testing providers, ensuring high-quality and timely delivery of assessments.
• Review penetration test reports, validate findings, and assess business impact and risk.
• Own the triage, prioritisation, tracking, and remediation of security vulnerabilities through to resolution.
• Ensure security issues are accurately logged, assigned, and monitored using tools such as Jira.
• Develop and maintain security testing standards, methodologies, and quality assurance processes.
• Produce security risk assessments and provide clear recommendations to technical and business stakeholders.
• Report on security posture, vulnerability trends, remediation progress, and key risk metrics.
• Support security accreditation, audit, and compliance activities against frameworks such as ISO 27001, NIST, GovS 007, and Cyber Essentials.
• Work closely with architects, developers, platform engineers, delivery teams, and risk functions to drive security improvements.
• Support the development and implementation of information security policies, standards, procedures, and guidance.
• Contribute to incident response activities, risk assessments, and wider cyber security assurance initiatives.

Qualifications

• Strong experience leading security testing, vulnerability management, or cyber security assurance functions.
• Experience managing penetration testing programmes and third-party security testing suppliers.
• Proven ability to assess, prioritise, and drive remediation of security vulnerabilities.
• Strong understanding of application security, infrastructure security, cloud security, and API security.
• Experience producing security risk assessments and presenting findings to senior stakeholders.
• Knowledge of security governance, risk management, and compliance frameworks.
• Experience working with vulnerability tracking and management tools such as Jira.
• Excellent stakeholder management and communication skills, with the ability to engage both technical and non-technical audiences.

Requirements

• Technical Knowledge: Vulnerability Management, Penetration Testing, Security Assurance, Risk Management, Cloud Security, Application Security, Infrastructure Security, Networking, Encryption Technologies, Microsoft Technologies, Linux Platforms, Incident Management.

Desirable Experience

• ISO 27001, NIST, GovS 007, Cyber Essentials, or similar security frameworks.
• GDPR and Data Protection Act 2018 knowledge.
• Experience operating within an ITIL-based environment.
• Public sector, government, or highly regulated industry experience.
• Security audit and accreditation support experience.

Benefits

• A security professional who can bridge the gap between cyber security testing, assurance, and risk management.
• Someone capable of challenging remediation activities and driving security improvements across multiple teams.
• A strong communicator who can influence stakeholders, manage suppliers, and provide clear security guidance at all levels.
• An individual who can provide confidence that digital services meet organisational security requirements and industry best practice.

Please be aware that this role can only be worked within the UK and not Overseas.

As a signatory of the Armed Forces Covenant, Companies House welcome applications from veterans, service leavers, reservists and military spouses or partners. Applications from eligible candidates who meet the essential criteria for the role will be prioritised for review.

In applying for this role, you acknowledge the following: "this role falls in scope of the Off Payroll Working in the Public Sector legislation. Any rates of payment quoted will reflect the gross rate per day for the assignment and will be subject to appropriate taxes and statutory costs."

Company Description

Companies House drives confidence in the economy and makes the UK a great place to start, and run, a business. Companies House is undergoing an historic change – to our systems, culture, services, and ways of working. Our people are at the heart of these changes. The Economic Crime and Corporate Transparency Act (2023) gives Companies House the power to play a more significant role in disrupting economic crime and supporting economic growth.