Cyber Security Control Tester | IT Risk & Assurance

mentmore.vincere.io; Peacehaven; On-site; GBP 45,000 - 65,000; Full time

Job summary

Mentmore is seeking a Control Tester to support cybersecurity control testing across a complex tech environment in the UK. You will assess design and operational effectiveness of security controls, gather evidence, document findings, and work with control owners to ensure assessments are thorough and accurate.

This hands-on role suits someone with IT audit, cybersecurity or control testing experience who wants to deepen expertise in risk, compliance and information security assurance.

Qualifications

• Experience in IT audit or control testing, assessing cybersecurity controls.
• Knowledge of information security principles and COBIT/COSO frameworks.
• Experience with threat intelligence, vulnerability management, security testing, IAM, incident response, cryptography.
• Strong written and verbal communication skills.
• Ability to work collaboratively with stakeholders while managing tasks independently.

Responsibilities

• Execute control testing activities per established procedures and templates.
• Develop and adapt test scripts for different control environments.
• Gather and review evidence to assess control design and operational effectiveness.
• Work with control owners and stakeholders to clarify requirements and support testing activities.
• Maintain accurate test plans, assessment records, results and reports.
• Identify and escalate issues, delays or control weaknesses.
• Contribute to continuous improvement of control testing processes and reporting.

Skills

IT audit

Control testing

Information security

Stakeholder management

Communication skills

Education

CISA

CISSP

CRISC

ISO 27001 Lead Auditor

Tools

COBIT

COSO

Security testing tools

Job description

Mentmore is seeking a Control Tester to support cybersecurity control testing across a complex tech environment in the UK. You will assess design and operational effectiveness of security controls, gather evidence, document findings, and work with control owners to ensure assessments are thorough and accurate.

This hands-on role suits someone with IT audit, cybersecurity or control testing experience who wants to deepen expertise in risk, compliance and information security assurance.