Control Tester – Cyber Security

mentmore.vincere.io; Peacehaven; On-site; GBP 45,000 - 65,000; Full time

Job summary

Mentmore is seeking a Control Tester to support cybersecurity control testing across a complex tech environment in the UK. You will assess design and operational effectiveness of security controls, gather evidence, document findings, and work with control owners to ensure assessments are thorough and accurate.

This hands-on role suits someone with IT audit, cybersecurity or control testing experience who wants to deepen expertise in risk, compliance and information security assurance.

Qualifications

• Experience in IT audit or control testing, assessing cybersecurity controls.
• Knowledge of information security principles and COBIT/COSO frameworks.
• Experience with threat intelligence, vulnerability management, security testing, IAM, incident response, cryptography.
• Strong written and verbal communication skills.
• Ability to work collaboratively with stakeholders while managing tasks independently.

Responsibilities

• Execute control testing activities per established procedures and templates.
• Develop and adapt test scripts for different control environments.
• Gather and review evidence to assess control design and operational effectiveness.
• Work with control owners and stakeholders to clarify requirements and support testing activities.
• Maintain accurate test plans, assessment records, results and reports.
• Identify and escalate issues, delays or control weaknesses.
• Contribute to continuous improvement of control testing processes and reporting.

Skills

IT audit

Control testing

Information security

Stakeholder management

Communication skills

Education

CISA

CISSP

CRISC

ISO 27001 Lead Auditor

Tools

COBIT

COSO

Security testing tools

Job description

Control Tester – Cyber Security

Location: UK – details available on application Sector: Cyber Security / IT Risk & Assurance

About the Role

We are seeking a Control Tester to support the delivery of cybersecurity control testing across a complex technology environment.

You will assess the design and operational effectiveness of security controls, gather supporting evidence, document findings and work with control owners to ensure assessments are completed accurately and consistently.

This is a hands-on opportunity for someone with experience in IT audit, cybersecurity or control testing who wants to develop their expertise in risk, compliance and information security assurance.

Key Responsibilities

• Execute control testing activities in line with established procedures, standards and templates.
• Develop and adapt test scripts to suit different control environments.
• Gather and review evidence to assess control design and operational effectiveness.
• Work with control owners and stakeholders to clarify requirements and support testing activities.
• Maintain accurate test plans, assessment records, results and reports.
• Identify and escalates issues, delays or control weaknesses.
• Contribute to continuous improvement of control testing processes and reporting.

Essential Skills and Experience

• Proven experience in IT audit or control testing, including assessing the design and operational effectiveness of cybersecurity controls.
• Understanding of information security principles and control frameworks, such as COBIT and COSO.
• Knowledge of cybersecurity domains, including:
  • Threat intelligence and vulnerability management.
  • Security testing and security architecture.
  • Infrastructure protection and application security.
  • Identity and access management.
  • Incident investigation and response.
  • Cryptography.
• Strong written and verbal communication skills.
• Ability to work collaboratively with stakeholders while managing tasks independently.

Desirable Experience and Qualifications

• Experience working in a regulated or complex organisation.
• Exposure to critical national infrastructure environments.
• Relevant professional certifications, such as CISA, CISSP, CRISC or ISO 27001 Lead Auditor.

The Opportunity

You’ll play an important role in strengthening information security assurance by helping assess whether cybersecurity controls are appropriately designed and operating effectively. This is an opportunity to build your experience across a broad range of security domains while contributing to risk management and compliance objectives.