Control Tester - Cyber Security

We are seeking a Control Tester to support the delivery of cybersecurity control testing across a complex technology environment.

You will assess the design and operational effectiveness of security controls, gather supporting evidence, document findings and work with control owners to ensure assessments are completed accurately and consistently.

This is a hands-on opportunity for someone with experience in IT audit, cybersecurity or control testing who wants to develop their expertise in risk, compliance and information security assurance.

Key Responsibilities

• Execute control testing activities in line with established procedures, standards and templates.

• Develop and adapt test scripts to suit different control environments.

• Gather and review evidence to assess control design and operational effectiveness.

• Work with control owners and stakeholders to clarify requirements and support testing activities.

• Maintain accurate test plans, assessment records, results and reports.

• Identify and escalate issues, delays or control weaknesses.

• Contribute to continuous improvement of control testing processes and reporting.

• Proven experience in IT audit or control testing, including assessing the design and operational effectiveness of cybersecurity controls.

• Understanding of information security principles and control frameworks, such as COBIT and COSO.

• Knowledge of cybersecurity domains, including:

o Threat intelligence and vulnerability management.

o Security testing and security architecture.

o Infrastructure protection and application security.

o Identity and access management.

o Incident investigation and response.

o Cryptography.

• Strong written and verbal communication skills.

• Ability to work collaboratively with stakeholders while managing tasks independently.

Desirable Experience and Qualifications

• Experience working in a regulated or complex organisation.

• Exposure to critical national infrastructure environments.

• Relevant professional certifications, such as CISA, CISSP, CRISC or ISO 27001 Lead Auditor.