Senior Manager, 1st Line Controls Testing & Certification

Mastercard; Harrogate; On-site; GBP 65,000 - 90,000; Full time

Job summary

Mastercard powers economies and protects data assets across 200+ countries. The 1st Line Controls Testing, Certification and Assurance Manager will lead certification audits and assurance activities to support ISO27001, PCI DSS and related frameworks within Vocalink Limited.

The role requires hands-on testing of controls, coordinating external audits, and mentoring junior analysts, with strong stakeholder engagement and risk-management focus.

Qualifications

• Experience with security related control frameworks and standards (e.g. ISO27001, NIST, PCI-DSS).
• Experience conducting security audits and coordinating external audits including certification audits.
• Ability to assess control design and operating effectiveness in complex environments and identify control gaps and improvement opportunities.
• Experience resolving certification and assurance issues.
• Knowledge of all areas of security.
• Strong investigative and analytical skills.
• Experience collaborating cross-functionally to identify and implement good practice security audit management and assurance processes.

Responsibilities

• Manage certification and assurance responsibilities and documentation.
• Prepare the organisation for annual certification audits.
• Support the assessment and validation of controls against security standards and obligations.
• Support the team in the management of VLL certifications, e.g. ISO27001 and PCI DSS.
• Support the team in the management of other assurance activities, e.g. ISAE3000.
• Conduct periodic testing of key and non-key controls in line with the Control Testing Methodology.
• Evaluate compliance with internal policies, standards, regulatory requirements, and customer obligations.
• Prepare and review control testing documentation, including test procedures, results, and identified gaps.
• Ensure timely escalation of control deficiencies and support remediation tracking.
• Create and quality assure reports and team outputs.
• Team Leadership, Collaboration & Stakeholder Engagement
• Governance & Continuous Improvement
• Stay informed on emerging risks, regulatory changes, certification changes and industry best practices with a focus on cybersecurity risks.

Skills

Security frameworks

Audit coordination

Analytical skills

Stakeholder management

Cybersecurity risk

Education

Bachelor's degree in Computer Science or related

Tools

MS Office Suite

GRC tools

Job description

Mastercard powers economies and protects data assets across 200+ countries. The 1st Line Controls Testing, Certification and Assurance Manager will lead certification audits and assurance activities to support ISO27001, PCI DSS and related frameworks within Vocalink Limited.

The role requires hands-on testing of controls, coordinating external audits, and mentoring junior analysts, with strong stakeholder engagement and risk-management focus.