Control Tester

Thames Water Utilities Limited; Reading; On-site; GBP 40,000 - 55,000; Full time

Benefits offered by this job

Competitive salary

26 days annual leave

Pension scheme

Performance pay

Employee benefits

Job summary

Thames Water Utilities Limited is actively seeking a Control Tester to support the Information Security team in delivering cybersecurity control testing across multiple domains. You will gather evidence, assess control effectiveness, and work with stakeholders to ensure controls are properly designed and operating as intended.

You will be eligible for Counter Terrorist Check (CTC) clearance and contribute to continuous improvement of testing frameworks while maintaining high-quality

Qualifications

• Experience in IT audit, IT risk, or cybersecurity control testing within an enterprise environment.
• Understanding of cybersecurity control frameworks and assurance methodologies.
• Strong written and verbal communication skills with clear documentation and reporting.
• Experience working in a regulated environment.
• Experience within the water utility industry or other large, complex critical national infrastructure organisations.

Responsibilities

• Assist in the execution of cybersecurity control testing activities in accordance with defined procedures, templates, and standards.
• Support the development and localisation of test scripts tailored to specific control environments.
• Gather and document evidence to assess the design and operational effectiveness of cybersecurity controls.
• Collaborate with control owners and service owners to clarify control objectives and facilitate smooth testing execution.
• Maintain accurate documentation for each control assessment, including test plans, results, and supporting evidence.
• Produce clear and consistent reports detailing testing outcomes and observations.
• Escalate issues, control deficiencies, or delays to the Control Testing & Assurance Manager.
• Contribute to the continuous improvement of the control testing framework, methodologies, and documentation.
• Work with key business stakeholders to support the organisation's cybersecurity and compliance objectives.
• Support the wider cybersecurity assurance programme through structured testing and evidence-based analysis.

Skills

Control testing

Cybersecurity

Analytical thinking

Communication

Independence

Written reports

Stakeholder collaboration

CTC clearance

Water sector experience

Tools

COSO

COBIT

Job description

As a Control Tester, you will play a key role within the Information Security team at Thames Water, supporting the Control Testing & Assurance Manager in delivering cybersecurity control testing activities across multiple security domains. Working closely with cybersecurity leadership, service owners, and control owners, you will help ensure security controls are effectively designed, implemented, and operating as intended across the organisation.

This role contributes to the Cybersecurity Control Testing & Assurance programme by assessing control effectiveness, gathering evidence, and supporting the organisation's wider security and compliance objectives. You will collaborate with stakeholders across the business to ensure testing activities are executed efficiently while maintaining high standards of documentation and reporting.

To be considered for this position, candidates must be eligible to obtain security clearance to a minimum of Counter Terrorist Check (CTC) level.

What you'll be doing as a Control Tester

• Assist in the execution of cybersecurity control testing activities in accordance with defined procedures, templates, and standards.
• Support the development and localisation of test scripts tailored to specific control environments.
• Gather and document evidence to assess the design and operational effectiveness of cybersecurity controls.
• Collaborate with control owners and service owners to clarify control objectives and facilitate smooth testing execution.
• Maintain accurate documentation for each control assessment, including test plans, results, and supporting evidence.
• Produce clear and consistent reports detailing testing outcomes and observations.
• Escalate issues, control deficiencies, or delays to the Control Testing & Assurance Manager.
• Contribute to the continuous improvement of the control testing framework, methodologies, and documentation.
• Work with key business stakeholders to support the organisation's cybersecurity and compliance objectives.
• Support the wider cybersecurity assurance programme through structured testing and evidence-based analysis.

• Experience in IT audit, IT risk, or cybersecurity control testing within an enterprise environment.
• Understanding of cybersecurity control frameworks and assurance methodologies.
• Strong analytical and problem-solving skills with the ability to assess control effectiveness.
• Experience working collaboratively with technical teams and business stakeholders.
• Ability to manage tasks independently while contributing to team objectives.
• Strong written and verbal communication skills, including clear documentation and reporting.
• Good planning and organisational skills with attention to detail.

Technical experience and skills

• Understanding of cybersecurity domains, including Threat Intelligence, Vulnerability Management, Security Testing, Security Architecture, Infrastructure Protection, Application Security, Identity and Access Management, Incident Investigation & Response, and Cryptography.
• Familiarity with information security control frameworks such as COBIT or COSO.
• Ability to gather, analyse, and document evidence related to the design and operational effectiveness of security controls.
• Experience in maintaining structured documentation, including test plans, assessment results, and reports., Experience working in a regulated environment.
• Experience within the water utility industry or other large, complex critical national infrastructure organisations.

Desirable technical skills and qualifications

• Professional certifications such as CISA, CISSP, CRISC, or ISO 27001 Lead Auditor.

We're the UK's largest water and wastewater company, with more than 16 million customers relying on us every day to supply water for their taps and toilets. We want to build a better future for all, helping our customers, communities, people, and the planet to thrive. It's a big job and we've got a long way to go, so we need help from passionate and skilled people, committed to making a difference and getting us to where we want to be in the years and decades to come.

Learn more about our purpose and values

Working at Thames Water

Thames Water is a unique, rewarding, and diverse place to work, where every day you can make a difference, yet no day is the same. As part of our family, you'll enjoy meaningful career opportunities, flexible working arrangements and excellent benefits.

If you're looking for a sustainable and successful career where you can make a daily difference to millions of people's lives while helping to protect the world of water for future generations, we'll be here to support you every step of the way. Together, we can build a better future for our customers, our region, and our planet.

Real purpose, real support, real opportunities. Come and join the Thames Water family. Why choose us? Learn more.

We're committed to being a great, diverse, and inclusive place to work. We welcome applications from everyone and want to ensure you feel supported throughout the recruitment process. If you need any adjustments, whether that's extra time, accessible formats, or anything else just let us know, we're here to help and support.

When a crisis happens, we all rally around to support our customers. As part of Team Thames, you'll have the opportunity to sign up to support our customers on the frontline as an ambassador. Full training will be given for what is undoubtedly an incredibly rewarding experience. It's also a great opportunity to learn more about our business and meet colleagues.

Disclaimer: due to the high volume of applications we receive, we may close the advert earlier than the advertised date, so we encourage you to apply as soon as possible to avoid disappointment.

• Competitive salary between £40,000 and £55,000 per annum, depending on experience.
• Annual Leave - 26 days holiday per year, increasing to 30 with the length of service. (plus bank holidays)
• Generous Pension Scheme through AON.
• Performance-related pay plan directly linked to company performance measures and targets.
• Access to lots of benefits to help you take care of you and your family's health and wellbeing, and your finances - from annual health MOTs and access to physiotherapy and counselling, to Cycle to Work schemes, shopping vouchers and life assurance.