Senior Security Control Manager

This is a fully remote position, open to applicants in United Kingdom.

📋 Description

• This position is accountable for steering Nasstar’s adherence to the Telecoms Security Act (TSA) and relevant Ofcom regulatory standards, ensuring the organization demonstrates a solid and defensible security framework.

• Serving as an integral member of the Risk & Compliance team, this role functions at the nexus of regulation and technology, closely collaborating with engineering, security, and operational teams to convert regulatory expectations into effective real-world controls.

• This is a high-impact position with visibility among senior stakeholders and significant relevance to the safeguarding of critical national infrastructure.

⛳️ Requirements

• Proficient in one or more of the following domains:

• Telecoms or network service provider environments

• Cybersecurity, network security, or infrastructure security

• Risk, compliance, or regulatory assurance within technology sectors

• Assisting or responding to regulatory frameworks (e.g. TSA, NCSC CAF, ISO 27001, NIS)

• Experience working in a second line (GRC) or assurance role, rather than in hands-on engineering or operational delivery

• Capability to engage with asset owners and technical subject matter experts to:

• Gather pertinent control evidence

• Confirm that controls are suitably designed and functioning

• Question instances where control coverage or assurance appears lacking

• Possession of at least one certification from the following: (ISC)² / ISACA: CISSP – Certified Information Systems Security Professional, CISM Certified Information Security Manager, CRISC Certified in Risk and Information Systems Control. Industry Network Security Certifications (preferred): CCNP Security / CCSP / CCNA Security, CompTIA Security+ / Network+

• Equivalent vendor or industry-recognized certifications

• Proven ability to interpret technical concepts and align them with security or regulatory requirements, as well as assess control effectiveness and identify gaps or weaknesses.

• Experience in a regulated telecoms environment, particularly in relation to the Telecoms Security Act (TSA) or Ofcom regulatory engagement.

🏝️ Benefits

• 25 days’ holiday (excluding bank holidays) + Your Birthday Off

• Flexible working – we understand the importance of maintaining a work/life balance, thus, we will consider any written request for flexible working

• Virtual working – we practice what we preach and empower our employees to work remotely

• Top tech – Leading services and solutions aren’t only for our clients; we provide best-of-breed software and hardware for all our staff as well

• 4x annual salary life assurance

• Health cash plan

• Retail discounts and additional perks from major brands