Cybersecurity Controls Tester

Thames Water; Reading; Hybrid; GBP 40,000 - 55,000; Full time

Benefits offered by this job

Hybrid working

26 days annual leave (increases with ≥

Job summary

Thames Water is seeking a Control Tester to join our Information Security team. You will support the Control Testing & Assurance Manager in delivering testing activities across multiple security domains, ensuring controls are properly designed, implemented, and operating as intended.

With base location hybrid in Reading, you will work 36 hours a week, collaborating with stakeholders and maintaining high-quality documentation and reporting to support our cybersecurity objectives.

Qualifications

• Experience in IT audit, IT risk, or cybersecurity control testing within an enterprise environment.
• Understanding of cybersecurity control frameworks and assurance methodologies.
• Strong analytical and problem-solving skills with the ability to assess control effectiveness.
• Experience working collaboratively with technical teams and business stakeholders.
• Ability to manage tasks independently while contributing to team objectives.
• Strong written and verbal communication skills, including clear documentation and reporting.
• Good planning and organisational skills with attention to detail.

Responsibilities

• Assist in the execution of cybersecurity control testing activities in accordance with defined procedures, templates, and standards.
• Support the development and localisation of test scripts tailored to specific control environments.
• Gather and document evidence to assess the design and operational effectiveness of cybersecurity controls.
• Collaborate with control owners and service owners to clarify control objectives and facilitate smooth testing execution.
• Maintain accurate documentation for each control assessment, including test plans, results, and supporting evidence.
• Produce clear and consistent reports detailing testing outcomes and observations.
• Escalate issues, control deficiencies, or delays to the Control Testing & Assurance Manager.
• Contribute to the continuous improvement of the control testing framework, methodologies, and documentation.
• Work with key business stakeholders to support the organisation’s cybersecurity and compliance objectives.
• Support the wider cybersecurity assurance programme through structured testing and evidence-based analysis.

Skills

IT audit

Cybersecurity frameworks

Analytical thinking

Stakeholder collaboration

Independent work

Communication skills

Planning & organisation

Job description

Thames Water is seeking a Control Tester to join our Information Security team. You will support the Control Testing & Assurance Manager in delivering testing activities across multiple security domains, ensuring controls are properly designed, implemented, and operating as intended.

With base location hybrid in Reading, you will work 36 hours a week, collaborating with stakeholders and maintaining high-quality documentation and reporting to support our cybersecurity objectives.