First-Line Security Controls Testing Manager

Mastercard; Harrogate; On-site; GBP 70,000 - 110,000; Full time

Job summary

Mastercard seeks a 1st Line Security Controls Testing Manager to join the Vocalink Control Office. The role supports the delivery of security control testing across domains within Vocalink Limited, a BoE-regulated CNI company enabling UK payments.

The role will lead a team of analysts, execute testing, identify gaps, and drive continuous improvement in risk management practices within a regulated environment.

Qualifications

• Experience in control testing, risk management within security in regulated environments.
• Strong investigative and analytical skills (enquiry, scanning, analysis, interviewing, testing).
• Understanding of control frameworks and standards (NIST, ISO, PCI-DSS).
• Ability to assess control design and operating effectiveness in complex environments.
• Excellent communication and stakeholder engagement skills.
• Professional certifications such as CISA, CISM, CISSP, CRISC, ISO 27001 are desirable.

Responsibilities

• Control Testing Execution: periodic testing of key and non-key controls per methodology.
• Evaluate compliance with internal policies, standards, regulatory requirements, and customer obligations.
• Prepare and review control testing documentation (procedures, results, gaps).
• Escalate control deficiencies and support remediation tracking.
• Lead and mentor junior team members (Senior Analysts).
• Support the Director of Control Testing in delivering the annual testing plan.
• Engage with 1st Line teams and coordinate with 2nd Line Security and Internal Audit.
• Contribute to governance reporting and trend analysis.
• Partner with control owners to provide guidance on control effectiveness and remediation.
• Contribute to development of testing standards and methodologies.

Skills

Control testing

Risk management

Analytical skills

Stakeholder engagement

Cybersecurity

Regulatory knowledge

Education

BSc in CS/IT

Tools

ACL

UNIX

Windows

DevOps

Cloud tech

Job description

Mastercard seeks a 1st Line Security Controls Testing Manager to join the Vocalink Control Office. The role supports the delivery of security control testing across domains within Vocalink Limited, a BoE-regulated CNI company enabling UK payments.

The role will lead a team of analysts, execute testing, identify gaps, and drive continuous improvement in risk management practices within a regulated environment.