Security Control Tester / Security Control Assessor

Head Resourcing Ltd; City of Edinburgh; Remote; GBP 40,000 - 60,000; Full time

Job summary

A leading information services company seeks seasoned security experts to assess and evaluate security controls. As a Lead Security Control Assessor, you'll oversee testing with a focus on both cloud and on-premise environments. This initial 8-month contract allows for remote work within the UK, requires an umbrella company setup, and offers competitive daily rates based on experience.

Qualifications

• Experience conducting security control testing in cloud environments.
• Professional certifications like CISA, CISM, or CISSP required.
• Knowledge of standards like NIST 800-53 and ISO 27001.

Responsibilities

• Lead assessment and evaluation of security controls.
• Conduct security control testing in both on-premise and cloud environments.
• Drive quality security assessments through thorough testing and automation.

Skills

Security control testing in cloud environments

IT Audit

Information Security control assessments

Communication skills

Stakeholder management

Automation in security testing

Education

CISA

CISM

CISSP

ISO 27001 Lead Auditor

Tools

AWS

Azure

Sailpoint

Rapid7

Wiz.io

MS Defender

Job description

Security Control Tester / Security Control Assessor

Our client is a global information services company and is seeking 3 seasoned security experts to lead the assessment and evaluation of security controls across systems and processes. As a Lead Security Control Assessor, you will oversee and conduct security control testing, verifying the design, implementation, and operational effectiveness of controls in both on-premise and cloud environments. Your expertise will be instrumental in driving quality security assessments through thorough testing, automation, and collaboration with cross-functional teams and stakeholders.

These roles can be based remotely within the UK and will be for an initial 8 month contract. The contract will require to be via umbrella company and have a banding of £398-£500 depending on experience.

Required Skills

• Experience with conducting security control testing in cloud environments such as AWS and Azure
• Experience performing IT Audit or Information Security control assessments, with specific experience in testing cloud security controls
• Professional certification such as CISA, CISM, CISSP, ISO 27001 Lead Auditor, or equivalent
• Knowledge of industry standards and frameworks such as NIST 800-53, ISO 27001/27002, CIS Controls, COBIT
• Strong communication and stakeholder management skills
• Experience with automated testing tools such as Sailpoint, Rapid7, Wiz.io, MS Defender

• Experience leveraging automation, data-driven testing techniques, and generative AI to gain efficiency in control assurance

If the above details appeal to you, PLEASE APPLY NOW to be considered.

Head Resourcing is committed to being an inclusive business where diversity is valued and celebrated. Diversity to us, includes but is not limited to: educational background, socio-economic background, neurodiversity, age, marriage and civil partnership status, veteran status, gender, gender identity, gender reassignment, sexual orientation, disability, religion or belief, race and ethnicity. As such we welcome enquiries and applications from everyone. We will be happy discuss with you any workplace adjustments you need in order to be at your best during the recruitment process.