Control Tester

Salary: £40,000 - 55,000 per year

• Experience in IT audit, IT risk, or cybersecurity control testing within an enterprise environment.
• Understanding of cybersecurity control frameworks and assurance methodologies.
• Strong analytical and problem-solving skills with the ability to assess control effectiveness.
• Experience working collaboratively with technical teams and business stakeholders.
• Ability to manage tasks independently while contributing to team objectives.
• Strong written and verbal communication skills, including clear documentation and reporting.
• Good planning and organisational skills with attention to detail.
• Understanding of cybersecurity domains, including Threat Intelligence, Vulnerability Management, Security Testing, Security Architecture, Infrastructure Protection, Application Security, Identity and Access Management, Incident Investigation & Response, and Cryptography.
• Familiarity with information security control frameworks such as COBIT or COSO.
• Ability to gather, analyse, and document evidence related to the design and operational effectiveness of security controls.
• Experience in maintaining structured documentation, including test plans, assessment results, and reports.
• Experience working in a regulated environment.
• Experience within the water utility industry or other large, complex critical national infrastructure organisations.
• Professional certifications such as CISA, CISSP, CRISC, or ISO 27001 Lead Auditor.
• Eligibility to obtain security clearance to a minimum of Counter Terrorist Check (CTC) level.

• Assist in the execution of cybersecurity control testing activities in accordance with defined procedures, templates, and standards.
• Support the development and localisation of test scripts tailored to specific control environments.
• Gather and document evidence to assess the design and operational effectiveness of cybersecurity controls.
• Collaborate with control owners and service owners to clarify control objectives and facilitate smooth testing execution.
• Maintain accurate documentation for each control assessment, including test plans, results, and supporting evidence.
• Produce clear and consistent reports detailing testing outcomes and observations.
• Escalate issues, control deficiencies, or delays to the Control Testing & Assurance Manager.
• Contribute to the continuous improvement of the control testing framework, methodologies, and documentation.
• Work with key business stakeholders to support the organisations cybersecurity and compliance objectives.
• Support the wider cybersecurity assurance programme through structured testing and evidence-based analysis.

• Cryptography
• Support
• Security

More:

We are Thames Water, the UKs largest water and wastewater company, serving more than 16 million customers every day. We offer a hybrid working arrangement based at Clearwater Court, Reading, with a 36-hour Monday to Friday working pattern. The role comes with a competitive salary of £40,000 to £55,000 per annum depending on experience, 26 days holiday per year increasing to 30 with service plus bank holidays, a generous pension scheme through AON, a performance-related pay plan, and access to a range of health, wellbeing, and financial benefits. We are a unique, rewarding, and diverse place to work, committed to supporting our people, welcoming applications from everyone, and helping build a better future for our customers, communities, and the planet.

last updated 39 week of 2026