Control Tester - Cyber Security

Mentmore Recruitment Ltd.; Old Warren; On-site; GBP 45,000 - 65,000; Full time

Job summary

Mentmore Recruitment Ltd. seeks a Control Tester to support cybersecurity control testing across a complex technology environment.

You will assess the design and operating effectiveness of security controls, gather evidence, document findings, and work with control owners to ensure assessments are completed accurately and consistently. This hands-on role suits someone with IT audit, cybersecurity, or control testing experience looking to grow in risk, compliance, and information security

Qualifications

• Experience in IT audit or control testing of cybersecurity controls.
• Knowledge of COBIT and COSO frameworks.
• Strong written and verbal communication skills.
• Ability to collaborate with stakeholders while managing tasks independently.

Responsibilities

• Execute control testing activities following established procedures and templates.
• Develop and adapt test scripts for different control environments.
• Gather and review evidence to assess design and operational effectiveness.
• Clarify requirements with control owners and stakeholders to support testing.
• Maintain test plans, records and reports accurately.
• Identify and escalate issues or control weaknesses; contribute to process improvements.

Skills

IT audit

control testing

cybersecurity controls

test scripting

stakeholder collaboration

communication

problem solving

Education

CISA

CISSP

CRISC

ISO 27001 Lead Auditor

Job description

Control Tester - Cyber Security

Location: UK - details available on application

Sector: Cyber Security / IT Risk & Assurance

About the Role

We are seeking a Control Tester to support the delivery of cybersecurity control testing across a complex technology environment.

You will assess the design and operational effectiveness of security controls, gather supporting evidence, document findings and work with control owners to ensure assessments are completed accurately and consistently.

This is a hands‑on opportunity for someone with experience in IT audit, cybersecurity or control testing who wants to develop their expertise in risk, compliance and information security assurance.

Key Responsibilities

• Execute control testing activities in line with established procedures, standards and templates.
• Develop and adapt test scripts to suit different control environments.
• Gather and review evidence to assess control design and operational effectiveness.
• Work with control owners and stakeholders to clarify requirements and support testing activities.
• Maintain accurate test plans, assessment records, results and reports.
• Identify and elevate issues, delays or control weaknesses.
• Contribute to continuous improvement of control testing processes and reporting.

Essential Skills and Experience

• Proven experience in IT audit or control testing, including assessing the design and operational effectiveness of cybersecurity controls.
• Understanding of information security principles and control frameworks, such as COBIT and COSO.
• Knowledge of cybersecurity domains, including:
• Threat intelligence and vulnerability management.
• Security testing and security architecture.
• Infrastructure protection and application security.
• Identity and access management.
• Incident investigation and response.
• Cryptography.
• Strong written and verbal communication skills.
• Ability to work collaboratively with stakeholders while managing tasks independently.

Desirable Experience and Qualifications

• Experience working in a regulated or complex organisation.
• Exposure to critical national infrastructure environments.
• Relevant professional certifications, such as CISA, CISSP, CRISC or ISO 27001 Lead Auditor.

The Opportunity

You’ll play an important role in strengthening information security assurance by helping assess whether cybersecurity controls are appropriately designed and operating effectively. This is an opportunity to build your experience across a broad range of security domains while contributing to risk management and compliance objectives.