Cloud Assurance Specialist, Financial Conduct Authority
£53-75k
Salary dependent on location
Financial regulation service
Be an early applicant
Financial regulation service
1001+ employees
Be an early applicant
£53-75k
Salary dependent on location
1001+ employees
Company mission
To enable a fair and thriving financial services market for the good of consumers and the economy.
Role
Who you are
- Direct experience applying industry security best practices and frameworks such as NCSC, NIST, CIS and CSA across modern technology platforms, including cloud‑hosted and SaaS services (e.g. Azure, AWS, Salesforce) in a cloud‑agnostic manner
- Demonstrated ability to translate complex security and technical risk issues for diverse audiences, including senior stakeholders, through clear written and verbal communication
- Experience designing, operating or contributing to assurance processes, including the production and management of regular (e.g. monthly) risk and control reporting and conducting or contributing to comprehensive platform and cloud risk assessments with clear, risk‑based remediation recommendations
- Effective stakeholder management skills, with the ability to persuade and question platforms, engineering and delivery teams without direct control ownership
- Demonstrable experience providing cloud and platform security architecture assurance, including assessing control design, implementation and effectiveness across multiple technology domains
- Practical experience using Cloud Security Posture Management (CSPM) and SaaS Security Posture Management (SSPM) tools to identify misconfigurations, control gaps and systemic risk themes
- Extensive experience carrying out platform and cloud risk assessments, from scoping through to reporting and remediation tracking
- Experience defining, producing and maintaining security metrics, including Key Performance Indicators (KPIs) and Key Risk Indicators (KRIs) to support senior level decision making
- Experience assuring controls across endpoint, network, identity, logging and monitoring, vulnerability management or attack surface management domains
- Exposure to secure software delivery / SSDLC assurance, including oversight of security controls embedded within delivery pipelines and/or experience working within a regulated, financial services or public sector environment
What the job involves
- We regulate financial services firms in the UK, to keep financial markets fair, thriving and effective. By joining us, you’ll play a key part in protecting consumers, driving economic growth and shaping the future of UK finance services
- Cyber and Information Resilience (C&IR) is responsible for the management of cyber security at the FCA. 'Cyber security' means the protection of the FCA's data and systems from malicious and/or accidental activity, including theft, damage and disruption, in order that the FCA can deliver its key business functions. C&IR is part of a Directorate lead by our CISO, Director of Cyber & Operational Resilience Division
- The Platform Assurance team provides independent assurance and specialised oversight across the FCA’s core technology platforms, spanning cloud‑hosted and on‑premise services, network, endpoint, identity and secure software delivery (SSDLC). The team plays a critical role in ensuring that security controls are well‑designed, effectively implemented and continuously improving in line with FCA risk appetite
- Oversee assurance activities for Microsoft Azure, evaluating security posture, architecture and control effectiveness across core cloud services
- Provide cloud-agnostic assurance oversight across AWS and key SaaS platforms (including Salesforce), ensuring consistent assessment standards regardless of technology stack
- Act as a subject-matter (SME) for platform security, offering guidance and challenge on security design, engineering decisions and control implementations
- Deliver architectural security oversight across platform domains, identifying design weaknesses, control gaps and improvement opportunities early in the lifecycle
- Reduce risk through pragmatic remediation, working with platform teams to prioritise issues, agree proportionate fixes and track actions through to closure
- Promote sustained control maturity, assessing control performance over time and recommending enhancements to improve resilience and governance
- Maintain independence from control ownership, providing objective assurance, effective second-line challenge and credible risk-based reporting
- Collaborate across multiple platform teams and stakeholders within Cyber & Information Resilience (C&IR), aligning assurance outcomes to organisational risk appetite and resilience objectives
- SC Clearance is required for this role (SC Guidance) - you will hold or will be required to obtain Security Check (SC) level vetting
Application process
- Useful information and timelines:
- Timeline:
- Job advert close: midnight, 13th May 2026
- CV Review/Shortlist: 15th May 2026
- Interviews: w/c 21st May 2026
- Your Recruiter will discuss the process in detail with you during screening for the role, therefore, please make them aware if you are going to be unavailable for any date during this time
- SC Clearance is required for this role (SC Guidance) - you will hold or will be required to obtain Security Check (SC) level vetting
Salary benchmarks
Our take
Developed on the back of the Financial Services Act of 2012, the Financial Conduct Authority is a regulatory body that acts as a regulator for financial firms, ensuring the integrity of the financial markets in the UK. Broadly focused on financial companies that provide consumer services, it’s governed by the Bank of England and therefore acts independently of the government.
The FCA is responsible for regulatory innovations, such as stronger customer authentication requirements, including biometric and code requirements for payments, that have clamped down on fraud and improved security for national consumers. The FCA also introduced the Anti-Money Laundering Supervision in 2017.
The organisation’s independence from government ensures its impartiality as a regulator. In the late 2010s, it set up the cryptoasset registration, a department responsible for ensuring the legality of crypto payments. This has become an important aspect of national counter terrorism measures, and exemplifies the complex and vital work that the organisation carries out.
Steph
Company Specialist at Welcome to the Jungle
Insights
Company
Company benefits
- 25 days holiday per year plus bank holidays
- Hybrid working (work from home up to 60% of your time)
- Private healthcare with Bupa
- A non-contributory Pension of at least 8%
- Life assurance
- Income protection
Company HQ
Stratford Cross, London, UK
Leadership
Nikhil Rathi
(CEO)Previously the Private Secretary to UK Prime Ministers Tony Blair and Gordon Brown and was the Chief of Staff and Director of International Development at the London Stock Exchange. Studied at St Anne's College Oxford.
Share this job
View 7 more jobs at Financial Conduct Authority