At a Glance
- Tasks: Lead cybersecurity control testing and ensure compliance with industry standards.
- Company: Join a forward-thinking company dedicated to cybersecurity excellence.
- Benefits: Competitive salary, generous holiday allowance, and hybrid working options.
- Why this job: Make a real impact in cybersecurity while developing your skills in a dynamic environment.
- Qualifications: Experience in cybersecurity assessments and strong communication skills required.
- Other info: Opportunity for career growth in a regulated and impactful industry.
The predicted salary is between 46800 - 62400 £ per year.
As a Control Testing Lead, you will play a key role within the Information Security team, supporting the Control Test and Assurance Manager in the delivery of a robust and forward-looking Cybersecurity Control Testing & Assurance Programme. This role requires strong cybersecurity expertise combined with hands-on experience in control testing, particularly in evaluating the effectiveness of security controls and ensuring alignment with internal policies, standards, and industry frameworks. This role will report directly to the Control Testing & Assurance Manager, with whom you will work to deliver the goals of the company to have a stable and fit-for-purpose control testing environment that supports the organisation’s security and compliance objectives.
What you’ll be doing as a Control Testing Lead:
- Support the implementation and continuous improvement of the Cybersecurity Control Testing Framework.
- Execute control testing in line with defined procedures, templates, and standards.
- Assist in the development and localisation of standard test scripts, ensuring they are tailored to specific control environments and aligned with the organisation’s Enterprise Risk Management Framework.
- Conduct control testing activities to evaluate the design and operational effectiveness of cybersecurity controls, documenting results clearly and raising issues where appropriate.
- Ensure timely delivery of assigned control assessments in accordance with the agreed testing schedule and escalation protocols.
- Maintain accurate and consistent documentation for each control assessment, including test plans, test results, and final reports.
- Escalate issues, delays, or risks to the Control Testing & Assurance Manager, contributing to the resolution of challenges and continuous improvement of the testing process.
- Collaborate with control owners and stakeholders to gather evidence, clarify control objectives, and support the smooth execution of testing activities.
- Stay informed on relevant cybersecurity frameworks (e.g., NIST CSF, CIS Controls) and industry best practices to support the evolution of the control testing programme.
What you should bring to the role:
- Proven experience in performing cybersecurity control assessments, including evaluating design and operational effectiveness.
- Strong understanding of information security principles, cyber risk management, and control frameworks.
- Clear and professional verbal and written communication, including the ability to explain cybersecurity issues to non-technical audiences.
- Ability to work independently with minimal supervision, taking ownership of assigned tasks and driving them to completion while maintaining high standards of quality and accuracy.
- Strong understanding of Cybersecurity Domains, including Threat Intelligence, Vulnerability Management, Security Testing, Security Architecture, Infrastructure Protection, Application Security, Identity and Access Management, Incident Investigation & Response and Cryptography.
Additional skills and experiences would be great to have:
- Experience working in a regulated environment.
- Experience within the water utility industry or large, complex critical national infrastructure.
- Experience in internal audit, external audit, or assurance functions related to IT or cybersecurity.
- Professional certifications such as CISA, CISSP, CRISC, or ISO 27001 Lead Auditor are advantageous.
What’s in it for you?
- Competitive salary of up to £78,000 per annum, depending on experience.
- Annual Leave - 26 days holiday per year, increasing to 30 with the length of service.
Control Testing Lead - Cyber Security in London employer: idibu
Contact Detail:
idibu Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land Control Testing Lead - Cyber Security in London
✨Tip Number 1
Network like a pro! Reach out to folks in the cybersecurity field, especially those who work in control testing. Attend industry events or webinars, and don’t be shy about asking for informational interviews. You never know who might have a lead on your dream job!
✨Tip Number 2
Show off your skills! Create a portfolio that highlights your experience with cybersecurity control assessments. Include case studies or examples of how you’ve evaluated security controls effectively. This will give potential employers a clear picture of what you can bring to the table.
✨Tip Number 3
Prepare for interviews by brushing up on your knowledge of cybersecurity frameworks like NIST CSF and CIS Controls. Be ready to discuss how you’ve applied these in past roles. We want to see your expertise shine through, so practice articulating your thoughts clearly!
✨Tip Number 4
Don’t forget to apply through our website! It’s the best way to ensure your application gets seen by the right people. Plus, it shows you’re genuinely interested in joining our team. Let’s get you on board as a Control Testing Lead!
We think you need these skills to ace Control Testing Lead - Cyber Security in London
Some tips for your application 🫡
Tailor Your CV: Make sure your CV speaks directly to the Control Testing Lead role. Highlight your cybersecurity expertise and hands-on experience in control testing. We want to see how your skills align with our needs!
Craft a Compelling Cover Letter: Your cover letter is your chance to shine! Use it to explain why you're the perfect fit for the role and how you can contribute to our Cybersecurity Control Testing & Assurance Programme. Keep it engaging and relevant!
Showcase Your Communication Skills: Since clear communication is key, make sure your application reflects your ability to explain complex cybersecurity concepts simply. We love candidates who can bridge the gap between technical and non-technical audiences!
Apply Through Our Website: We encourage you to apply through our website for a smoother process. It helps us keep track of your application and ensures you don’t miss any important updates from us!
How to prepare for a job interview at idibu
✨Know Your Cybersecurity Frameworks
Make sure you brush up on relevant cybersecurity frameworks like NIST CSF and CIS Controls. Being able to discuss these frameworks in detail will show your expertise and understanding of the industry standards that are crucial for the role.
✨Prepare for Control Testing Scenarios
Think about specific examples from your past experience where you've executed control testing or evaluated security controls. Be ready to explain your approach, the challenges you faced, and how you overcame them. This will demonstrate your hands-on experience and problem-solving skills.
✨Communicate Clearly and Confidently
Since you'll need to explain complex cybersecurity issues to non-technical audiences, practice articulating your thoughts clearly. Use simple language to convey your points without losing the technical essence. This will highlight your communication skills, which are essential for the role.
✨Show Your Continuous Improvement Mindset
Be prepared to discuss how you've contributed to the continuous improvement of processes in your previous roles. Share specific examples of how you've localised test scripts or enhanced control testing frameworks, as this aligns perfectly with the expectations of the Control Testing Lead position.