Cyber Risk and Assurance Manager

About the role

This position joins Tesco's Cyber Assurance team, part of the wider Cyber Risk function, to independently deliver cyber assurance and compliance initiatives across the organisation.

Key responsibilities

• Perform risk‑based controls testing across security domains using internal frameworks aligned with ISO 27001, NIST CSF and CIS.
• Review and validate evidence from Cyber Security and Technology teams to ensure regulatory and industry compliance.
• Collaborate with technical teams to remediate control gaps and improve the overall security posture.
• Support compliance programmes such as NIS2, GDPR and PCI DSS, including gap assessments and reporting.
• Maintain up‑to‑date knowledge of cyber‑security laws and regulations applicable to Tesco’s operating countries.

Required profile

• Strong critical thinking, attention to detail and organisational skills.
• Excellent written and verbal communication in Czech/Slovak and English.
• Ability to build solid relationships with internal and external stakeholders.
• Professional qualification such as CISA, CISM or CISSP.

Required skills

• Experience with ISO 27001, NIST CSF and CIS security frameworks.
• Knowledge of NIS2, GDPR and PCI DSS regulatory requirements.
• IT audit and risk‑management expertise, including security control assessments.

What we offer

• Yearly salary bonus based on individual and business performance.
• Extra week of annual leave above legal entitlement.
• Pension contribution and cafeteria benefit system.
• Multisport card, meal allowances and virtual doctor service.
• Flexible working time and access to training platforms such as Udemy and LinkedIn Learning.