Remote Cyber Security Controls Tester - SC Cleared

Cyberfort Group; United Kingdom; Remote; GBP 92,000 - 148,000; Part time

Job summary

Cyberfort Group is seeking an experienced Cyber Security Controls Tester to support a large-scale assurance programme in a highly regulated environment. You will work remotely with security architects, risk teams and stakeholders to assure control design, implementation and operation, ensuring alignment with standards such as ISO 27001, NIST CSF and NIST 800-53.

Responsibilities include evaluating control effectiveness, drafting testing plans, evidence collection, and delivering remediation

Qualifications

• Experience testing security controls in complex environments.
• Knowledge of ISO27001, NIST CSF, NIST 800-53, CIS Controls.
• Experience auditing/assurance against frameworks.
• Experience reviewing network configurations, IAM, encryption, endpoint controls.
• Familiarity with HLDs, LLDs, and Controls Catalogues.
• Knowledge of GDPR, PCI DSS, ICO guidance.
• Understanding UK government security policies (HMG, NCSC).
• Ability to produce test plans and assurance reports.
• Strong stakeholder management and communication.
• Analytical and evidence-based approach.

Responsibilities

• Evaluate security controls to meet standards in HLDs/LLDs and Controls Catalogues.
• Test controls against ISO 27001, NIST CSF, NIST 800-53.
• Review policies, network configs, firewall rules, IAM, encryption and endpoint controls.
• Apply testing methodologies with documentation reviews and evidence-based assurance.
• Define testing scope with risk teams and security architects.
• Assess design and operating effectiveness of controls.
• Provide remediation guidance for weaknesses.
• Support improvements to policies and security controls.
• Document testing activities, findings and remediation.
• Produce assurance reports and present findings to stakeholders.

Skills

Security controls testing

ISO 27001

NIST CSF

NIST 800-53

CIS Controls

IAM controls

Encryption controls

Endpoint security

HLDs/LLDs

Stakeholder management

Policy review

Tools

Azure

AWS

GRC tools

Job description

Cyberfort Group is seeking an experienced Cyber Security Controls Tester to support a large-scale assurance programme in a highly regulated environment. You will work remotely with security architects, risk teams and stakeholders to assure control design, implementation and operation, ensuring alignment with standards such as ISO 27001, NIST CSF and NIST 800-53.

Responsibilities include evaluating control effectiveness, drafting testing plans, evidence collection, and delivering remediation