1st Line Security Controls Testing Manager
Full-time
Mastercard
Our Purpose Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential. Title and Summary
• Control Testing Execution
Conduct periodic testing of key and non-key controls in line with the Control Testing Methodology.
Evaluate compliance with internal policies, standards, regulatory requirements, and customer obligations.
Prepare and review control testing documentation, including test procedures, results, and identified gaps.
Ensure timely escalation of control deficiencies and support remediation tracking.
• Team Leadership, Collaboration & Stakeholder Engagement
Supervise and mentor junior team members (Senior Analysts), providing guidance on testing execution and quality assurance.
Support the Director of Control Testing in delivering the annual testing plan and contributing to team development.
Engage with 1st Line teams while coordinating closely with 2nd Line Security partners and maintaining effective liaison with Internal Audit.
Contribute to reporting for governance forums, including dashboards, thematic reviews, and trend analysis.
Partner with control owners, providing guidance on control effectiveness and remediation.
• Governance & Continuous Improvement
Support the development and refinement of control testing standards, tools, and methodologies.
Contribute to the maturity of the 3 Lines of Defence model and promote a culture of proactive risk management.
Stay informed on emerging risks, regulatory changes, and industry best practices with a focus on cybersecurity risks. Experience & Qualifications:
• Experience in control testing, or assurance, and risk management within security in a regulated environment.
• Strong investigative and analytical experience (e.g. enquiry, scanning, analysis, interviewing, testing), problem-solving, and decision-making skills.
• Strong understanding of control frameworks and standards (e.g., NIST, CRI, ISO and PCI-DSS).
• Ability to assess control design and operating effectiveness in complex environments and to identify control gaps and improvement opportunities.
• Excellent communication and stakeholder engagement skills.
• Professional certifications such as CISA, CISM, CISSP, CRISC, ISO 27001 or equivalent is desirable. Preferred Skills & Attributes:
• Bachelor’s degree in Computer Science, Cyber Security, Information Technology, or related field.
• Good Knowledge of security controls and IT general controls across platforms such as UNIX, HP Nonstop, and Windows.
• Understanding of software development lifecycle (SDLC), DevOps, and cloud technologies.
• Proficiency in data analytics tools such as ACL or similar control testing tools.
• Proficiency in Microsoft Office Suite (MS Word, MS Excel, MS Access and MS PowerPoint)
• Strong organisational skills with the ability to prioritise and manage multiple tasks.
• Self-starter with a continuous improvement mindset and a collaborative approach. Corporate Security Responsibility
1st Line Security Controls Testing Manager
Main Purpose of role:
The newly created Vocalink Control Office function is seeking Manager within the 1st Line Control Testing team to support the delivery of control testing activities across Security control domains, within Vocalink Limited (VLL). VLL is a Bank of England regulated, Critical National Infrastructure (CNI) company that enables the payments of 90% of salaries, 70% of utility bills, most ATM transactions and every cheque cleared in the UK.
• Control Testing Execution
Conduct periodic testing of key and non-key controls in line with the Control Testing Methodology.
Evaluate compliance with internal policies, standards, regulatory requirements, and customer obligations.
Prepare and review control testing documentation, including test procedures, results, and identified gaps.
Ensure timely escalation of control deficiencies and support remediation tracking.
• Team Leadership, Collaboration & Stakeholder Engagement
Supervise and mentor junior team members (Senior Analysts), providing guidance on testing execution and quality assurance.
Support the Director of Control Testing in delivering the annual testing plan and contributing to team development.
Engage with 1st Line teams while coordinating closely with 2nd Line Security partners and maintaining effective liaison with Internal Audit.
Contribute to reporting for governance forums, including dashboards, thematic reviews, and trend analysis.
Partner with control owners, providing guidance on control effectiveness and remediation.
• Governance & Continuous Improvement
Support the development and refinement of control testing standards, tools, and methodologies.
Contribute to the maturity of the 3 Lines of Defence model and promote a culture of proactive risk management.
Stay informed on emerging risks, regulatory changes, and industry best practices with a focus on cybersecurity risks. Experience & Qualifications:
• Experience in control testing, or assurance, and risk management within security in a regulated environment.
• Strong investigative and analytical experience (e.g. enquiry, scanning, analysis, interviewing, testing), problem-solving, and decision-making skills.
• Strong understanding of control frameworks and standards (e.g., NIST, CRI, ISO and PCI-DSS).
• Ability to assess control design and operating effectiveness in complex environments and to identify control gaps and improvement opportunities.
• Excellent communication and stakeholder engagement skills.
• Professional certifications such as CISA, CISM, CISSP, CRISC, ISO 27001 or equivalent is desirable. Preferred Skills & Attributes:
• Bachelor’s degree in Computer Science, Cyber Security, Information Technology, or related field.
• Good Knowledge of security controls and IT general controls across platforms such as UNIX, HP Nonstop, and Windows.
• Understanding of software development lifecycle (SDLC), DevOps, and cloud technologies.
• Proficiency in data analytics tools such as ACL or similar control testing tools.
• Proficiency in Microsoft Office Suite (MS Word, MS Excel, MS Access and MS PowerPoint)
• Strong organisational skills with the ability to prioritise and manage multiple tasks.
• Self-starter with a continuous improvement mindset and a collaborative approach. Corporate Security Responsibility
All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:
- Abide by Mastercard’s security policies and practices;
- Ensure the confidentiality and integrity of the information being accessed;
- Report any suspected information security violation or breach, and
- Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines.
Vacancy posted 3 days ago
Similar jobs that could be interesting for youBased on the 1st Line Security Controls Testing Manager in United Kingdom vacancy
- ...wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and... ...governments realize their greatest potential. Title and Summary Manager, 1st Line Controls Testing, Certification and Assurance Main purpose of the role...SuggestedFull timeWork at officeWorldwide
- ...for talented Software Test Engineers to support our Electronic Warfare line of business, working on... ...willingness to learn. Security Clearance This role... ...of Personnel Security Controls referred to as National... ...Performance : All employees at management level and below are...SuggestedPermanent employmentContract workPart timeWorldwideFlexible hours
- ...make it easy for employees, managers, and leaders to get what they... ...Workday HCM (business processes, security, notifications, and reporting... ...and Adaptive Support testing efforts for new functionality... ...releases, ensuring smooth and controlled deployments Maintain clear...SuggestedRemote jobFull time
- ...role reports to the Configuration and Data Management Capability Manager (CDMCM) for the UK... ...the key players in Aerospace, Defence and Security. Headquartered in Italy, Leonardo has... ...the Integrate Project Team (IPT) and the Line of Business. (LoB) As an individual, you...SuggestedContract work
- ...digital assets platform spans trading, investment banking, asset management, staking, self-custody, and tokenization technology. We also... ...delivery Coordinate with adjacent teams (infrastructure, security, controls) to manage dependencies and unblock execution...SuggestedFull timeWork at officeLocal area
- ...newcomers to the space. Kraken is committed to [industry-leading security]( [crypto education]( and [world-class client support]( through... ...Core Infrastructure Team at Kraken is dedicated to create and manage a robust, secure, and automated infrastructure that is both...Remote jobFull timeLocal areaShift work
£100k - £120k per year
...Software & hardware solutions Develop relationships with varied stakeholders to include system integrators, OEM’s and end user’s Manage relationships from the UK but travel to Germany as 30-40% of your role Work with customer’s in a variety of sectors to include...Full time- ...intensity action-oriented leader to accelerate our vehicle-level testing by supporting and coordinating local operations, assisting... ...responsible for maintaining excellent data collection, through both management of a team of vehicle operators and individual excellence in...Hourly payFull timeLocal areaFlexible hoursShift work
- ...generations. Role Summary We are seeking a Tech Lead Manager (TLM) to lead the evolution and scaling of our perception... .../website, network/device, recruiting system usage/interaction, security and preference information. Rivian may use your Candidate Personal...Contract workLocal area
- ...troubleshooting support for Oracle CPQ applications. Support testing and deployment efforts to maintain a stable and efficient CPQ... ...solutions, as well as the development, implementation and management of applications, infrastructure and connectivity. We are one of...Work at officeRemote workWork from homeMonday to FridayFlexible hours
- ...will directly support the delivery of safe, secure, and high-performance systems used in... ...assurance during the design, development, test, and release phases Develop and maintain... ...contractual requirements Estimate and manage quality assurance resources for multiple...Permanent employmentContract workPart timeFor subcontractorFlexible hours
- ...materials to raise the "pension IQ" across the organisation. Manage external relationships: Serve as a key technical point of... ...Upvest? We're working on solving a hard problem: fixing the securities financial infrastructure to empower more people to be able to invest...Remote jobFull timeLive inWork at officeFlexible hours
- ...assess emerging manufacturing technologies and processes that can improve production capabilities. Vendor Engagement & Trial Management : Develop trial plans with external vendors, oversee execution, and evaluate results to determine suitability for integration....Full timeWork at officeFlexible hours
- ...safety-critical, high-complexity systems. You'll lead critical testing, demonstration, and validation programs across our global... ...robotics, or other regulated/safety-critical partners), including managing milestone delivery, stakeholder expectations, and on-site execution...Odd jobFull timeWork at officeRemote workWork from homeShift work
- ...Working at Wintermute We are looking for an experienced Product Manager to lead the development of our NODE platform, enabling seamless... ...stakeholders across the business to define, build, and ship a secure, scalable, and high-performance trading platform. What you...Full timeVisa sponsorshipRelocation package
- ...Proficiency in T-SQL, including writing and optimising queries, Index Management Ability to plan resource requirements from high level... ...solutions Familiarity with other database technologies Security Clearance You must be eligible for full security clearance....Permanent employmentContract workPart timeWork from homeFlexible hours
- ...Kraken is committed to [industry-leading security]( [crypto education]( and [world-class client... ...The opportunity Create comprehensive test plans before feature development,... .... Collaborate with engineers, product managers, and designers to define QA processes for...Remote jobFull timeLocal area
- ...Job Title: Regulatory Affairs & Systems Data Manager Location: Cambridge (Hybrid/Flexible) Job type: permanent At Mundipharma, we are proud of the work we do to bring innovative treatments to patients. We challenge ourselves constantly to deliver more for patients...Permanent employmentFlexible hours
- ...not limited to, leading the strategic direction and product development for European products while maintaining a constant focus on managing and growing revenues for the business. While this position will be focused on the growth and management of the European product...Full timeWork at office
- ...a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships... ...realize their greatest potential. Title and Summary Manager, Market Delivery & Technology Account Manager, UK&I Overview...Full timeWorldwide
- ...newcomers to the space. Kraken is committed to [industry-leading security]( [crypto education]( and [world-class client support]( through... ...engineering, or distributed systems — with at least 3 years managing engineering teams ~ Experience and knowledge of building data...Remote jobFull timeLocal area
Do you want to receive more vacancies?
Subscribe and receive similar vacancies to 1st Line Security Controls Testing Manager. Be the first to apply!
