Tech Stack
Cyber SecurityUnix
About the role
- Conduct periodic testing of key and non-key controls in line with the Control Testing Methodology.
- Evaluate compliance with internal policies, standards, regulatory requirements, and customer obligations.
- Prepare and review control testing documentation, including test procedures, results, and identified gaps.
- Ensure timely escalation of control deficiencies and support remediation tracking.
- Supervise and mentor junior team members (Senior Analysts), providing guidance on testing execution and quality assurance.
- Support the Director Control Testing and Head of Control Testing in delivering the annual testing plan and contributing to team development.
- Engage with 1st Line teams while coordinating closely with 2nd Line Technology Risk partners and maintaining effective liaison with Internal Audit.
- Contribute to reporting for governance forums, including dashboards, thematic reviews, and trend analysis.
- Partner with control owners, providing guidance on control effectiveness and remediation.
- Support the development and refinement of control testing standards, tools, and methodologies.
- Contribute to the maturity of the 3 Lines of Defence model and promote a culture of proactive risk management.
- Stay informed on emerging risks, regulatory changes, and industry best practices with a focus on technology risks.
Requirements
- Experience in control testing, or assurance, and risk management within technology in a regulated environment.
- Strong investigative and analytical experience (e.g. enquiry, scanning, analysis, interviewing, testing), problem-solving, and decision-making skills.
- Strong understanding of control frameworks and standards (e.g., ITIL, CRI, COBIT).
- Ability to assess control design and operating effectiveness in complex environments and to identify control gaps and improvement opportunities.
- Excellent communication and stakeholder engagement skills.
- Professional certifications such as CISA, ITIL, COBIT, CRISC, or equivalent is desirable.
- Bachelor’s degree in Information Technology, Computer Science, Cyber Security, or related field.
- Good Knowledge of Service Management processes and IT general controls across platforms such as UNIX, HP Nonstop, and Windows.
- Proficiency in data analytics tools such as ACL or similar control testing tools.
- Proficiency in Microsoft Office Suite (MS Word, MS Excel, MS Access and MS PowerPoint).
- Strong organisational skills with the ability to prioritise and manage multiple tasks.
- Self-starter with a continuous improvement mindset and a collaborative approach.
- Abide by Mastercard’s security policies and practices;
- Ensure the confidentiality and integrity of the information being accessed;
- Report any suspected information security violation or breach;
- Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines.
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard skills
control testingrisk managementanalytical skillscontrol frameworkscontrol design assessmentdata analyticsIT general controlsproblem-solvingdecision-makingservice management processes
Soft skills
investigative skillscommunication skillsstakeholder engagementorganisational skillscollaborative approachcontinuous improvement mindsetmentoringguidancequality assuranceprioritisation
Certifications
CISAITILCOBITCRISCBachelor's degree in Information TechnologyBachelor's degree in Computer ScienceBachelor's degree in Cyber Security