Security Assurance Assistant Manager

Job description

Maintain and oversee the Security Assurance Framework (SAF), ensuring all controls are documented, approved, and regularly reviewed. Define control owners and establish clear accountability for each control. Develop and execute annual security assurance and control testing plans. Assess the effectiveness of all SAF controls through design (DET) and operating effectiveness (OET) reviews. Conduct walkthroughs, evidence reviews, and validation testing to verify control performance.

Ensure controls operate as intended and achieve security objectives. Monitor compliance against all SAF controls, track control implementation status across business units, and identify non-compliance issues. Define security evidence requirements, review, validate, and ensure the completeness and accuracy of submitted evidence. Prepare quarterly security assurance reports and support audit and review processes. Collaborate with internal teams to improve security processes and address control gaps.

Qualifications

Bachelor’s degree in Information Security, Computer Science, IT, or related field. 3–5 years of experience in information security, internal control, or risk management. Strong understanding of security frameworks, control testing, and compliance standards. Experience in control assessment, evidence management, and audit preparation. Proficiency with audit tools, data analytics, and reporting (e.g., Excel, Power BI). Excellent analytical, documentation, and communication skills.

High attention to detail and ability to handle sensitive information with confidentiality. Problem-solving mindset and proactive approach to security assurance.