1st Line Security Controls Testing Manager

About the role

The newly created Vocalink Control Office is looking for a Manager to lead the 1st Line Control Testing team. The role will oversee security control testing across Vocalink Limited, a critical national infrastructure company regulated by the Bank of England.

Key responsibilities

• Execute periodic testing of key and non‑key security controls in line with the Control Testing Methodology and document results.
• Evaluate compliance with internal policies, regulatory requirements and customer obligations, escalating deficiencies and tracking remediation.
• Supervise and mentor senior analysts, supporting the Director of Control Testing in delivering the annual testing plan.
• Engage with 1st Line teams, 2nd Line security partners and Internal Audit, contributing to governance reporting and dashboards.
• Support the development of testing standards, tools and methodologies, and promote continuous improvement of the 3‑Lines of Defence model.

Required profile

• Experience in control testing, assurance or risk management within a regulated security environment.
• Strong investigative, analytical and problem‑solving skills, with the ability to assess control design and operating effectiveness.
• Knowledge of control frameworks and standards such as NIST, ISO, PCI‑DSS and CRI.
• Excellent communication and stakeholder‑engagement abilities.
• Professional certifications (e.g., CISA, CISM, CISSP, CRISC, ISO 27001) are desirable.

Required skills

• UNIX, HP Nonstop and Windows platforms.
• Understanding of SDLC, DevOps and cloud technologies.
• Data‑analytics tools such as ACL.
• Microsoft Office Suite (Word, Excel, Access, PowerPoint).
• Familiarity with NIST, ISO 27001 and PCI‑DSS frameworks.