Control Testing Automation & Monitoring Lead - Cyber Security

Mentmore; Reading; On-site; GBP 70,000 - 110,000; Full time

Job summary

Mentmore is seeking a Control Testing Automation & Monitoring Lead to develop automated control testing and continuous monitoring solutions across IT, OT, and business functions. You will identify automation opportunities, improve testing processes, and support risk management, compliance, and cybersecurity objectives.

You'll work with technical teams, control owners and stakeholders to build a scalable automated control testing environment and deliver measurable risk insights.

Qualifications

• Proven experience in control testing or audit automation.
• Experience with automation tools and scripting languages (Python, PowerShell, RPA platforms).
• Knowledge of risk management and control frameworks.
• Familiarity with IT/cloud environments and OT.
• Ability to measure control effectiveness with metrics.

Responsibilities

• Identify opportunities to automate control testing and introduce continuous monitoring.
• Develop and implement automation workflows, plans and processes.
• Evaluate and recommend suitable automation tools and technologies.
• Work with technical teams to establish data collection and acquisition processes.
• Review automated testing results, identify control deficiencies and elevate risks or issues.
• Maintain documentation covering workflows, testing procedures and exception handling.
• Monitor control effectiveness and identify opportunities for continuous improvement.
• Collaborate with stakeholders to gather requirements and communicate findings clearly.
• Keep up to date with relevant control frameworks, industry standards and best practices.

Skills

Control testing automation

Process automation

Audit automation

Risk management

IT environments & OT

Scripting (Python/PowerShell/RPA)

Stakeholder management

Tools

Power BI

Tableau

RPA platforms

Audit automation tools

Job description

The Role

We are seeking a Control Testing Automation & Monitoring Lead to develop and implement automated control testing and continuous monitoring solutions across IT, operational technology (OT) and business functions.

You will identify automation opportunities, improve control testing processes and support the organisation's risk management, compliance and cybersecurity objectives. You'll work closely with technical teams, control owners and business stakeholders to build an effective and scalable automated control testing environment.

Key Responsibilities

• Identify opportunities to automate control testing and introduce continuous monitoring.
• Develop and implement automation workflows, plans and processes.
• Evaluate and recommend suitable automation tools and technologies.
• Work with technical teams to establish data collection and acquisition processes.
• Review automated testing results, identify control deficiencies and elevate risks or issues.
• Maintain documentation covering workflows, testing procedures and exception handling.
• Monitor control effectiveness and identify opportunities for continuous improvement.
• Collaborate with stakeholders to gather requirements and communicate findings clearly.
• Keep up to date with relevant control frameworks, industry standards and best practices.

Essential Skills and Experience

• Proven experience in control testing automation, process automation or audit automation.
• Experience using automation tools and scripting languages such as Python, PowerShell, RPA platforms or audit automation tools.
• Strong understanding of risk management, control frameworks and control effectiveness.
• Familiarity with IT environments, cloud platforms and ideally operational technology (OT).
• Ability to measure and report on control effectiveness using relevant metrics.
• Strong communication and stakeholder management skills, including explaining technical issues to non-technical audiences.
• Ability to work independently and deliver high-quality outcomes within agreed timescales.

Desirable Experience and Qualifications

• Experience in a regulated environment, utilities or critical national infrastructure.
• Familiarity with COBIT, COSO, NIST CSF or CIS Controls.
• Exposure to cybersecurity domains such as vulnerability management and identity management.
• Experience with reporting and analytics tools such as Power BI or Tableau.
• Relevant certifications such as CISA, CISSP, CRISC or ISO 27001 Lead Auditor.

The Opportunity

You'll have the opportunity to improve control assurance through automation, strengthen continuous monitoring and help deliver more efficient, consistent and measurable risk and compliance processes.