Security Controls Testing Lead – 1st Line

Mastercard; Greater London; On-site; GBP 90,000 - 120,000; Full time

Job summary

Mastercard, via Vocalink Control Office, seeks a 1st Line Security Controls Testing Manager to lead control testing across security domains. You will embed a strong control environment by executing tests, identifying gaps, and guiding risk management improvements.

In this role you will supervise analysts, work with 1st and 2nd line security partners, and contribute to governance dashboards and reports. Strong governance, regulatory knowledge, and leadership are essential.

Qualifications

• Experience in control testing, assurance and risk management within security in a regulated environment.
• Strong investigative, analytical and communication skills.
• Familiarity with control frameworks and standards (NIST, ISO 27001, PCI-DSS).

Responsibilities

• Conduct periodic testing of key and non-key controls in line with the Control Testing Methodology.
• Evaluate compliance with internal policies, standards, regulatory requirements, and customer obligations.
• Prepare and review control testing documentation, including test procedures, results and identified gaps.
• Ensure timely escalation of control deficiencies and support remediation tracking.
• Supervise and mentor junior team members (Senior Analysts).
• Support the Director of Control Testing in delivering the annual testing plan and team development.
• Engage with 1st Line teams while coordinating with 2nd Line Security partners and Internal Audit.
• Contribute to governance reporting, dashboards, and trend analysis.
• Partner with control owners to provide guidance on control effectiveness and remediation.
• Support development and refinement of testing standards, tools, and methodologies.
• Contribute to maturity of the 3 Lines of Defence model and risk culture.

Skills

Control testing

Risk management

NIST

ISO 27001

PCI-DSS

Stakeholder management

Leadership

Cybersecurity

Analytical thinking

Education

Bachelor's degree in Computer Science, Cyber Security, Information Technology, or related field

Tools

ACL

Job description

Mastercard, via Vocalink Control Office, seeks a 1st Line Security Controls Testing Manager to lead control testing across security domains. You will embed a strong control environment by executing tests, identifying gaps, and guiding risk management improvements.

In this role you will supervise analysts, work with 1st and 2nd line security partners, and contribute to governance dashboards and reports. Strong governance, regulatory knowledge, and leadership are essential.