Cyber Governance and Assurance Manager

The Cyber Governance and Assurance Manager role is embedded within the Cyber Security function of the Security & Resilience team at UK Export Finance. The successful candidate will be responsible for leading the governance and assurance function for cyber security, ensuring that all policies, procedures, and controls are robust, effective, and compliant with both business objectives and regulatory standards.

The Corporate Services Group (CSG) brings together a broad range of specialist functions which enable UK Export Finance to operate effectively and safely. The Security & Resilience team, headed by the Deputy Director of Security, plays a critical role in protecting UK Export Finance's people, information, physical assets, and operational continuity.

Key responsibilities include:

• Leading and coordinating cyber governance and assurance activity across the organisation
• Developing, implementing, and continuously improving cyber security governance frameworks, policies, standards, and processes
• Planning and delivering assurance activity, including internal/external reviews, audits, and assessments
• Providing oversight of cyber security controls and working with control owners to confirm controls are designed appropriately and operating effectively
• Monitoring and maintaining cyber security policies and standards, ensuring they remain current, risk-based, and aligned to organisational objectives
• Engaging with senior stakeholders, providing clear briefings and advice on assurance status, key risks, compliance position, and required decisions

The ideal candidate will have:

• A current, relevant professional qualification or certification in cyber security governance, risk, compliance, or assurance
• Proven understanding of relevant government cyber standards and assurance approaches
• Experience of planning and managing assurance activity, including defining scope, coordinating evidence, reporting findings, and driving remediation to completion
• Experience of leading or owning cyber governance and assurance work, including setting direction, establishing ways of working, and providing clear oversight and reporting to senior stakeholders