1st Line Technology - Controls Testing Senior Analyst-1

Title and Summary

1st Line Technology – Controls Testing Senior Analyst-1

Main Purpose of Role

The newly created Vocalink Control Office function is seeking a Senior Analyst within the 1st Line Control Testing team to support the delivery of control testing activities across technology control domains, within Vocalink Limited (VLL). VLL is a Bank of England regulated, Critical National Infrastructure (CNI) company that enables the payments of 90% of salaries, 70% of utility bills, most ATM transactions and every cheque cleared in the UK. This role plays a key part in embedding a strong control environment by executing control testing, identifying control gaps, and supporting continuous improvement in risk management practices.

Key Responsibilities

• Support periodic testing of key and non‑key controls in accordance with the Control Testing Methodology.
• Assess control design and operating effectiveness against internal policies, standards, regulatory requirements, and customer obligations.
• Collect and document control testing evidence; prepare clear and accurate test documentation including procedures and results.
• Identify and document control deficiencies and support remediation follow‑up activities.
• Monitor the control testing mailbox, ensuring timely review and response to incoming queries.
• Work closely with 1st Line teams to obtain evidence and clarify control processes.
• Liaise with 2nd Line Technology risk partners and Internal Audit to ensure alignment of testing activities.
• Prepare management information, dashboards, and thematic analysis for governance forums.
• Support control owners with observations on effectiveness and contribute to remediation discussions.
• Adhere to control testing standards, procedures, and documentation requirements.
• Identify opportunities to streamline testing activities, improve efficiency, and enhance consistency.
• Maintain awareness of regulatory requirements, emerging risks, and industry practices within technology risk domains.
• Contribute to strengthening the 3 Lines of Defence model through robust testing practices.

Experience & Qualifications

• Experience in control testing, assurance, and risk management within technology in a regulated environment.
• Strong investigative, analytical, problem‑solving and decision‑making skills.
• Good understanding of control frameworks and standards (e.g., ITIL, CRI, COBIT).
• Ability to assess control design and identify gaps and improvement opportunities in complex environments.
• Excellent communication and stakeholder engagement skills.
• Professional certifications such as CISA, ITIL, COBIT, CRISC, or equivalent are desirable.

Preferred Skills & Attributes

• Bachelor’s degree in Information Technology, Computer Science, Cyber Security, or related field.
• Knowledge of IT general controls across platforms such as UNIX, HP Nonstop, and Windows.
• Proficiency in Microsoft Office Suite (Word, Excel, Access, PowerPoint).
• Strong organisational skills with ability to prioritise and manage multiple tasks.
• Self‑starter with continuous improvement mindset and collaborative approach.

Corporate Security Responsibility

• Abide by Mastercard’s security policies and practices.
• Ensure confidentiality and integrity of information accessed.
• Report suspected information security violations or breaches.
• Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines.

Seniority Level

• Mid‑Senior level

Employment Type

• Full‑time

Job Function

• Information Technology

Industries

• Financial Services, IT Services and IT Consulting, and Technology, Information and Internet