Director, Information Security – Assurance

AVEVA

Director of Security Assurance overseeing independent testing of AVEVA's security controls. Leading a team to ensure compliance and connection to governance processes.

Posted 6/18/2026full-timeCambridge • 🇬🇧 United KingdomLeadWebsite

Tech Stack

Tools & technologies

Cloud

About the role

Key responsibilities & impact

Lead AVEVA’s Security Assurance function within the central Digital Security organization
Independently test if AVEVA’s security controls are operating as designed
Connect assurance findings directly to the risk register and governance process
Design and lead a continuous controls assurance programme
Oversee in-depth technical assurance activities including penetration testing and configuration reviews
Own the security evidence library and lead coordination of external audit and certification processes
Identify control weaknesses and remediation tracking through the GRC risk register
Provide high-quality, evidence-based assurance reporting to the CISO and AVEVA Executive Team

Requirements

What you’ll need

10+ years in information security with at least 5 years in a senior role
Deep expertise in control testing methodologies, assurance frameworks, and security audit practices across ISO 27001, SOC 2, NIST CSF, NIS2, and IEC 62443
Strong technical breadth across IT security, cloud security, and application security
Proven track record of building and leading assurance or audit teams
Experience leading external audit and certification processes (ISO 27001, SOC 2, or equivalent)
Excellent assurance reporting skills

Benefits

Comp & perks

Flexible benefits fund
Emergency leave days
Adoption leave
28 days annual leave (plus bank holidays)
Pension
Life cover
Private medical insurance
Parental leave
Education assistance program

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

penetration testingconfiguration reviewscontrol testing methodologiesassurance frameworkssecurity audit practicescloud securityapplication security

Soft Skills

leadershipreportingcommunication

Certifications

ISO 27001SOC 2NIST CSFNIS2IEC 62443