Security Assurance Manager

Job Req ID:

Posting Date:

Function:

Location:

Salary:

About the role

The Security Assurance Manager provides first-line cyber security governance across BT International, ensuring the effective implementation, measurement and continuous improvement of the BT Group Cyber Security Control Framework.

The role acts as the governance interface between Protect BT, Cyber Operations and BT International Delivery Units, translating security requirements into measurable improvement programmes and providing governance and oversight of Delivery Unit-led remediation activities.

Operating without direct line management authority, the role influences technical and business stakeholders to improve the organisation's cyber security posture, ensuring cyber security controls remain within agreed Risk Appetite or, where this cannot be achieved, that accountable Delivery Units implement appropriate remediation plans, compensating controls and formal risk management through the agreed governance processes.

Success is achieved by improving BT International's cyber security control posture through effective governance of Delivery Unit-led remediation activities and ensuring that cyber risks are managed within the agreed Risk Appetite or through formal risk governance where this is not immediately achievable.

What you’ll be doing

Cyber Security Control Governance

• Provide governance over the implementation and effectiveness of BT Cyber Security Controls across BT International.
• Drive continuous improvement of the organisation's cyber security posture through structured governance, performance analysis and engagement with Delivery Unit leadership.
• Review cyber security performance against Risk Appetite and agreed KPIs.
• Challenge remediation plans and ensure measurable progress towards security objectives.
• Provide governance oversight of cross-functional Path to Green programmes.

Cyber Security Performance Management

• Interpret enterprise cyber security metrics generated from BT strategic security platforms.
• Identify systemic weaknesses, emerging risks and deteriorating performance.
• Provide operational security reporting and performance insights to Delivery Units, enabling informed prioritisation and delivery of remediation activities.
• Support Delivery Unit leadership in developing and governing Path to Green plans to achieve agreed cyber security objectives.
• Provide regular reporting to senior leadership and governance forums.

Urgent Action Vulnerability (UAV) Governance

• Lead BTI governance for Urgent Action Vulnerabilities declared by BT Cyber Operations.
• Coordinate Delivery Unit responses to mandatory remediation activities.
• Govern progress against remediation deadlines established through STAG by CyOps
• Where Delivery Units cannot complete remediation within required timescales, govern the Artemis risk acceptance process, ensuring appropriate justification, compensating controls, executive approvals and ongoing review.
• Maintain executive visibility of remediation status, residual risk and outstanding actions.

Essential Skills / Experience

The successful candidate will typically have demonstrable experience in:

• Enterprise Cyber Security or Security Governance.
• Engaging with senior technical and business stakeholders.
• Governing enterprise remediation programmes.
• Interpreting cyber security metrics and driving performance improvement.
• vulnerability management, cyber security controls and cyber risk management.

Technical Knowledge

Strong understanding of enterprise cyber security including:

• Cyber Security Control Frameworks
• Vulnerability Management , Endpoint Security , Identity & Access Management, Secure Configuration, Security Monitoring and SIEM, Zero trust, secure tool coverage
• Cyber Security Risk management
• Enterprise Security Architecture principles
• Working knowledge of enterprise security technologies such as Qualys, CrowdStrike, Entra ID, SIEM platforms and related tooling is expected.

Desirable Skills / Experience

Experience in one or more of the following areas would be advantageous:

• Security compliance frameworks (e.g. ISO/IEC 27001, NIST CSF, CIS Controls)

Security compliance frameworks (e.g. ISO/IEC 27001, NIST CSF, CIS Controls)

• Information Security Management Systems (ISMS)

Information Security Management Systems (ISMS)

• Internal and external audit support

Internal and external audit support

• Security policy and standards governance

Security policy and standards governance

At BT International, our purpose is to keep the world connected. As part of BT, we build on almost 180 years of innovation and expertise to deliver secure connectivity and digital services to some of the world’s leading multinational businesses and organisations. Our customers trust us to safeguard their data, drive their digital transformation and keep their businesses running. With colleagues on the ground across the world and supporting customers wherever they need to operate, BT International offers a truly global experience. Whether it’s about providing cloud connectivity, helping organisations collaborate, or enabling innovation in cybersecurity and digital services, you’ll be part of a team that shapes how businesses succeed in a world that is being transformed by AI. If you have the drive and ambition to make an impact on a global stage, BT International is where it happens.