Control Testing Automation & Monitoring Lead

Control Testing Automation & Monitoring Lead - Cyber Security

The Role

We are seeking a Control Testing Automation & Monitoring Lead to develop and implement automated control testing and continuous monitoring solutions across IT, operational technology (OT) and business functions.

You will identify automation opportunities, improve control testing processes and support the organisation's risk management, compliance and cybersecurity objectives. You'll work closely with technical teams, control owners and business stakeholders to build an effective and scalable automated control testing environment.

Key Responsibilities

Identify opportunities to automate control testing and introduce continuous monitoring.

Develop and implement automation workflows, plans and processes.

Evaluate and recommend suitable automation tools and technologies.

Work with technical teams to establish data collection and acquisition processes.

Review automated testing results, identify control deficiencies and escalate risks or issues.

Maintain documentation covering workflows, testing procedures and exception handling.

Monitor control effectiveness and identify opportunities for continuous improvement.

Collaborate with stakeholders to gather requirements and communicate findings clearly.

Keep up to date with relevant control frameworks, industry standards and best practices.Essential Skills and Experience

Proven experience in control testing automation, process automation or audit automation.

Experience using automation tools and scripting languages such as Python, PowerShell, RPA platforms or audit automation tools.

Strong understanding of risk management, control frameworks and control effectiveness.

Familiarity with IT environments, cloud platforms and ideally operational technology (OT).

Ability to measure and report on control effectiveness using relevant metrics.

Strong communication and stakeholder management skills, including explaining technical issues to non-technical audiences.

Ability to work independently and deliver high-quality outcomes within agreed timescales.Desirable Experience and Qualifications

Experience in a regulated environment, utilities or critical national infrastructure.

Familiarity with COBIT, COSO, NIST CSF or CIS Controls.

Exposure to cybersecurity domains such as vulnerability management and identity management.

Experience with reporting and analytics tools such as Power BI or Tableau.

Relevant certifications such as CISA, CISSP, CRISC or ISO 27001 Lead Auditor.The Opportunity

You'll have the opportunity to improve control assurance through automation, strengthen continuous monitoring and help deliver more efficient, consistent and measurable risk and compliance processes