Security Controls Tester Consultant

JR United Kingdom; Slough; On-site; GBP 40,000 - 65,000; Full time

Job summary

A consulting position at a leading firm, seeking a Security Controls Tester Consultant in Slough, United Kingdom. The role involves evaluating and testing security controls to ensure compliance with internal standards, with responsibilities including documentation and collaboration with control owners. Ideal candidates will bring expertise in control design, encryption, and an understanding of regulatory frameworks.

Qualifications

• Expertise in control design and testing required.
• Familiarity with RCSA frameworks beneficial.
• Strong audit mindset needed.

Responsibilities

• Evaluate and test security controls against NIST 800-53 requirements.
• Document results and analyze weaknesses from control testing.
• Collaborate with control owners to resolve findings.

Skills

Control design

Encryption

Vulnerability testing

Penetration testing

Audit mindset

Regulator-facing assurance

Tools

Archer

Job description

Security Controls Tester Consultant, Slough

Client: Albany Beck

Location: Slough, United Kingdom

Job Category: Other

EU work permit required: Yes

Job Views: 4

Posted: 31.05.2025

Expiry Date: 15.07.2025

Job Description:

Purpose:

The individual will be responsible for delivering robust control testing, aligned with regulatory and internal standards, to ensure control design adequacy and effectiveness. The role supports RCSA processes and leads evidence-based evaluations.

Key Responsibilities:

• Evaluate and test security controls against NIST 800-53 requirements.
• Execute scheduled control testing, document results, and analyze weaknesses.
• Review and capture control evidence for audit and compliance purposes.
• Collaborate with control owners and remediation teams to resolve findings.
• Use Archer to record outcomes and align with risk control inventory.

Skills & Experience:

• Expertise in control design, encryption, and testing (including vulnerability and penetration testing).
• Familiarity with Archer and RCSA frameworks.
• Understanding of both technical and non-technical control types (HR, systems, assets).
• Strong audit mindset and regulator-facing assurance experience.