Information Security Assurance Specialist (we have offices in London, Leeds & Cambridge)

Company Description

Genomics England partners with the NHS to provide whole genome sequencing diagnostics. We also equip researchers to find the causes of disease and develop new treatments – with patients and participants at the heart of it all.

Our mission is to continue refining, scaling, and evolving our ability to enable others to deliver genomic healthcare and conduct genomic research.

We are accelerating our impact and working with patients, doctors, scientists, government and industry to improve genomic testing, and help researchers access the health data and technology they need to make new medical discoveries and create more effective, targeted medicines for everybody.

Job Description

We are hiring an Information Security Assurance Specialist to join us here at Genomics England.
This is a meaningful role that is very much focused on assurance, governance, and compliance rather than day-to-day technical engineering. This role is about managing risk, ensuring regulatory alignment, supporting accreditation, and building awareness across the organisation, with a particular emphasis on cyber and IT security compliance.

You will work closely with the Information Security Assurance Manager to assess risks, review policies, and support incident response activities when required. You will be confident and experienced in coordinating audits, supplier assessments, and penetration tests, ensuring findings are tracked and addressed. You will also contribute to staff awareness and wider governance, so security remains a shared responsibility across the business.

This is a significant opportunity to make a real impact in a unique and forward-thinking organisation where security and trust are critical to enabling progress in genomics.

Key Responsibilities

Support assurance, risk, and compliance activities across all services delivered by Genomics England.
Review and contribute to cyber security policies, frameworks, and governance.
Arrange and track audits, penetration tests, and supplier assessments, ensuring timely follow-up of findings.
Support accreditation and regulatory compliance activities.
Assist with cyber risk assessments, documenting and contributing to treatment plans.
Provide input into awareness programmes to strengthen organisational understanding of security and compliance.
Analyse and interpret data to produce clear, actionable assurance insights.Essential Skills & Experience

Solid background in audit, assurance, or compliance, ideally within information or cyber security.
Understanding of governance frameworks, regulatory requirements, and accreditation processes.
Strong analytical skills with the ability to turn data into meaningful recommendations.
Clear communicator, able to explain risk and compliance issues to technical and non-technical stakeholders.
Proven organisational skills with the ability to manage multiple assurance activities.Desirable Skills & Experience

Experience enhancing or building assurance frameworks.
Knowledge of supplier audits and third-party risk management.
Familiarity with industry standards and emerging risks in cyber security.
Experience contributing to awareness or training programmes around compliance and assurance.

Qualifications

Qualifications are not mandatory; however, certifications from ISACA, such as CISA or CISM, a Lead Auditor qualification, or equivalent, are all highly welcome and beneficial.

Additional Information

Closing Date: Sunday 5th October at 23:00 (UK time) 

Salary From:  £51,000

Being an integral part of such a meaningful mission is extremely rewarding in itself, but in order to support our people, we’re continually improving our benefits package. We pride ourselves on investing in our people and supporting them to achieve their career goals, as well as offering a benefits package including: 

Generous Leave: 30 days’ holiday plus bank holidays, additional leave for long service, and the option to apply for up to 30 days of remote working abroad annually (approval required).
Family-Friendly: Blended working arrangements, flexible working, enhanced maternity, paternity and shared parental leave benefits.
Pension & Financial: Defined contribution pension (Genomics England double-matches up to 10%, however you can contribute more if you wish), Life Assurance (3x salary), and a Give As You Earn scheme.
Learning & Development: Individual learning budgets, support for training and certifications, and reimbursement for one annual professional subscription (approval required).
Recognition & Rewards: Employee recognition programme and referral scheme.
Health & Wellbeing: Subsidised gym membership, a free Headspace account, and access to an Employee Assistance Programme, eye tests, flu jabs.Equal opportunities and our commitment to a diverse and inclusive workplace 

Genomics England is actively committed to providing and supporting an inclusive environment that promotes equity, diversity and inclusion best practice both within our community and in any other area where we have influence. We are proud of our diverse community where everyone can come to work and feel welcomed and treated with respect regardless of any disability, ethnicity, gender, gender identity, religion, sexual orientation, or social background. 

Genomics England’s policies of non-discrimination and equity and will be applied fairly to all people, regardless of age, disability, gender identity or reassignment, marital or civil partnership status, being pregnant or recently becoming a parent, race, religion or beliefs, sex or sexual orientation, length of service, whether full or part-time or employed under a permanent or a fixed-term contract or any other relevant factor.  

Genomics England does not tolerate any form of discrimination, harassment, victimisation or bullying at work. Such behaviour is contrary to