Cyber Risk and Assurance Manager

About the role

This is a fantastic opportunity to join Tesco's Cyber Assurance team, part of the wider Cyber Risk function, based in Prague. You will work as the second line of defence, ensuring proportionate controls are in place to mitigate cyber risk and supporting regulatory compliance across Tesco's operating countries.

Key responsibilities

• Carry out cyber assurance and compliance initiatives independently, delivering quality results on time.
• Perform risk‑based controls testing across security domains using internal frameworks aligned with ISO 27001, NIST CSF and CIS.
• Review and validate evidence from Cyber Security/Technology teams to ensure completeness and regulatory compliance.
• Collaborate with Cyber Security and Technology teams to remediate identified control gaps.
• Maintain up‑to‑date knowledge of cyber security laws and regulations (e.g., NIS2, GDPR, PCI DSS) and apply them to Tesco’s operations.
• Support compliance programmes, conduct gap assessments, evidence reviews and reporting.
• Provide reporting to Cyber Security leadership and governance committees.
• Identify and drive process‑improvement opportunities within the Cyber Assurance team.

Required profile

• Fluent in Czech/Slovak and English (written and verbal).
• Strong critical thinking, attention to detail and organisational skills.
• Excellent written and verbal communication, able to present to senior stakeholders.
• At least one professional qualification such as CISA, CISM or CISSP.
• Experience in IT audit, IT risk management and delivering cyber risk and compliance activities (e.g., regulatory audits, PCI assessments, ISO audits).

Required skills

• Security frameworks: ISO 27001, NIST Cybersecurity Framework, CIS Controls.
• Regulatory knowledge: NIS2, GDPR, PCI DSS.
• Security controls testing and evidence validation.
• IT audit and risk assessment methodologies.

What we offer

• Yearly salary bonus based on individual and business performance.
• Additional week of annual leave (total 5 weeks).
• Pension contribution and cafeteria benefit system.
• Multisport card, meal allowances and employee discounts.
• Flexible working time and remote work options.
• Training and development through Udemy, Udemy Pro and LinkedIn Learning.