Cybersecurity Control Tester & Assurance Analyst

Thames Water Utilities Limited; Reading; On-site; GBP 40,000 - 55,000; Full time

Benefits offered by this job

Competitive salary

26 days annual leave

Pension scheme

Performance pay

Employee benefits

Job summary

Thames Water Utilities Limited is actively seeking a Control Tester to support the Information Security team in delivering cybersecurity control testing across multiple domains. You will gather evidence, assess control effectiveness, and work with stakeholders to ensure controls are properly designed and operating as intended.

You will be eligible for Counter Terrorist Check (CTC) clearance and contribute to continuous improvement of testing frameworks while maintaining high-quality

Qualifications

• Experience in IT audit, IT risk, or cybersecurity control testing within an enterprise environment.
• Understanding of cybersecurity control frameworks and assurance methodologies.
• Strong written and verbal communication skills with clear documentation and reporting.
• Experience working in a regulated environment.
• Experience within the water utility industry or other large, complex critical national infrastructure organisations.

Responsibilities

• Assist in the execution of cybersecurity control testing activities in accordance with defined procedures, templates, and standards.
• Support the development and localisation of test scripts tailored to specific control environments.
• Gather and document evidence to assess the design and operational effectiveness of cybersecurity controls.
• Collaborate with control owners and service owners to clarify control objectives and facilitate smooth testing execution.
• Maintain accurate documentation for each control assessment, including test plans, results, and supporting evidence.
• Produce clear and consistent reports detailing testing outcomes and observations.
• Escalate issues, control deficiencies, or delays to the Control Testing & Assurance Manager.
• Contribute to the continuous improvement of the control testing framework, methodologies, and documentation.
• Work with key business stakeholders to support the organisation's cybersecurity and compliance objectives.
• Support the wider cybersecurity assurance programme through structured testing and evidence-based analysis.

Skills

Control testing

Cybersecurity

Analytical thinking

Communication

Independence

Written reports

Stakeholder collaboration

CTC clearance

Water sector experience

Tools

COSO

COBIT

Job description

Thames Water Utilities Limited is actively seeking a Control Tester to support the Information Security team in delivering cybersecurity control testing across multiple domains. You will gather evidence, assess control effectiveness, and work with stakeholders to ensure controls are properly designed and operating as intended.

You will be eligible for Counter Terrorist Check (CTC) clearance and contribute to continuous improvement of testing frameworks while maintaining high-quality