Technology Controls Testing Analyst

NatWest Group; City of Edinburgh; Remote; GBP 40,000 - 60,000; Full time

Job summary

A leading financial institution is seeking a Technology Controls Testing Analyst to ensure the adequacy of IT General Controls and technology infrastructure. In this role, you'll document control weaknesses and assess regulatory compliance while collaborating with various teams. The ideal candidate will have a strong background in infrastructure testing and be proficient in SQL, Oracle, and Unix. The position offers a remote-first working model.

Qualifications

• Proven experience in adequacy and effectiveness testing of IT General Controls.
• Ability to document test plans and communicate findings effectively.
• Identify control weaknesses and recommend improvements.

Responsibilities

• Assure applications and technology infrastructure fit for purpose.
• Document control weaknesses and maintain testing documentation.
• Contribute to risk-based assurance programmes and perform walkthroughs.

Skills

Risk identification

Documentation skills

Communication skills

Risk assessment

Communication skills

Education

Professional certification such as CISA or CRISC

Tools

SQL

Oracle

Unix

Job description

Overview

Join us as a Technology Controls Testing Analyst

• We’ll look to you to protect the bank by assuring that our applications and technology infrastructure is adequate, effective and fit for purpose on an end-to-end basis
• You’ll clearly document any control weaknesses identified within the adequacy and effectiveness assessments and testing undertaken
• This is a chance to join a talented and supportive team that will help you achieve great exposure as you develop with us

What you’ll do

In this role, you’ll work on Information Technology General Controls, Automated Controls and contribute to the ongoing design and development of assurance processes and methodology.

You’ll also maintain detailed test documentation and reports for the technology infrastructure you assess, keeping stakeholders informed of testing progress and results, in line with quality expectations and compliance requirements. You’ll be required to meet clear testing timeline, ensuring that any documentation is complete and accurate to satisfy external auditing from external parties. We’ll look to you to clearly communicate any identified control weaknesses to the team, control owners and relevant business control partners.

In addition, you’ll:

• Contribute to the development and delivery of an annual risk-based assurance programme
• Perform walkthroughs with stakeholders on the technology you assess, documenting high quality control testing workpapers
• Undertake adequacy and effectiveness assessments of technology controls
• Collaborate with business teams, at relevant level, to ensure a comprehensive understanding of controls and their testing procedures
• Stay up to date with regulatory requirements and industry best practices for technology controls

Qualifications

To excel in this role, you’ll have a proven experience in end to end adequacy and effectiveness testing of IT General Controls for infrastructure such as SQL, Oracle and Unix and complex Automated Controls. Professional certification such as CISA or CRISC would be beneficial.

You’ll also have:

• The ability to identify risks associated with use of IT applications and infrastructure and assess the internal controls that provide mitigation
• Good written and verbal communication skills to effectively document test plans, results, and communicate findings to the team, stakeholders and SMEs
• The ability to identify control weaknesses and recommend improvements to strengthen internal control frameworks

Hours

35

Job Posting Closing Date: 27/10/2025

Ways of Working: Remote First