Senior Security Control Manager

Job not on LinkedIn

🔥 0 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Nasstar

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

🏢 Enterprise

📡 Telecommunications

Cloud Computing • Enterprise • Telecommunications

Nasstar is a cloud service specialist that designs, implements, and manages multi-cloud solutions, innovative communication tools, and high-performance networking. With a strong global presence, Nasstar supports customers across various industries by offering a comprehensive suite of cloud services. The company has undergone several strategic acquisitions and rebranding efforts to enhance its capabilities, such as the acquisitions of Modality, Outsourcery, and others. Nasstar is committed to evolving with the rapidly changing tech industry and values enthusiastic individuals who are driven and passionate about making a difference.

📋 Description

• This role is responsible for leading Nasstar’s compliance with the Telecoms Security Act (TSA) and associated Ofcom regulatory requirements, ensuring the organisation can evidence a robust and defensible security posture. • As a key member of the Risk & Compliance function, this role operates at the intersection of regulation and technology, partnering closely with engineering, security, and operational teams to translate regulatory expectations into practical, real-world control effectiveness. • This is a high-impact role with visibility across senior stakeholders and direct relevance to the protection of critical national infrastructure.

🎯 Requirements

• Experienced in one or more of the following areas: • Telecoms or network service provider environments • Cyber security, network security, or infrastructure security • Risk, compliance, or regulatory assurance within technology functions • Supporting or responding to regulatory frameworks (e.g. TSA, NCSC CAF, ISO 27001, NIS) • Experience operating in a second line (GRC) or assurance capacity, rather than hands-on engineering or operational delivery • Ability to engage with asset owners and technical SMEs to: • Extract relevant control evidence • Validate that controls are appropriately designed and operating • Challenge where control coverage or assurance appears insufficient • At least one certification from the following: (ISC)² / ISACA: CISSP – Certified Information Systems Security Professional CISM Certified Information Security Manager CRISC Certified in Risk and Information Systems Control Industry Network Security Certifications (desirable): CCNP Security / CCSP / CCNA Security CompTIA Security+ / Network+ • Equivalent vendor or industry-recognised certifications • Demonstrated ability to interpret technical concepts and align them to security or regulatory requirements. And assess control effectiveness and identify gaps or weaknesses. • Experience within a regulated telecoms environment, particularly under either Telecoms Security Act (TSA) or Ofcom regulatory engagement.

🏖️ Benefits

• 25 days’ holiday (excluding bank holidays) + Your Birthday Off • Flexible working – it’s important to maintain a work/life balance, as such, we will consider any written request for flexible working • Virtual working – we practice what we preach and empower our people to work remotely • Top tech – Leading services and solutions aren’t just for our clients; we supply best-of-breed software and hardware for all our staff too • 4x annual salary life assurance • Health cash plan • Retail discounts and other perks from major brands