Cyber Security Controls Tester (Contractor)

Reference: 6cg59mpjf7c1qg7gw0yf

We are seeking an experienced Cyber Security Controls Tester to support the assessment, validation and continuous improvement of security controls across a complex technology environment. Working on a contract basis, you will help determine whether controls are appropriately designed, consistently implemented and operating effectively in line with internal policies, recognised security frameworks and applicable regulatory requirements. You will work closely with control owners, technology teams, risk specialists and internal stakeholders to gather evidence, clarify processes and communicate findings.

Your responsibilities will include planning and executing control testing activities across areas such as access management, vulnerability management, change management, incident response, security monitoring, data protection, third-party risk and infrastructure security. You will review policies, procedures, system configurations, tickets, reports and other supporting evidence; conduct interviews and walkthroughs; document test procedures and results; and identify control gaps, exceptions and opportunities for improvement. You will produce clear, accurate testing workpapers and reports, assess the potential impact of identified issues, agree practical remediation actions and track outstanding findings through to resolution. You may also support control design reviews, risk assessments, audit preparation and the development of repeatable testing methodologies.

The successful candidate will have proven experience in cyber security controls testing, IT audit, technology risk, governance or a closely related discipline. A strong understanding of frameworks and standards such as ISO 27001, NIST, COBIT, CIS Controls or SOC 2 is required, together with the ability to interpret technical information and translate it into clear risk-based conclusions. Experience using governance, risk and compliance tools, testing access controls and reviewing cloud or infrastructure environments would be advantageous. You should be analytical, organised and comfortable challenging evidence constructively while building effective relationships with stakeholders. Excellent written and verbal communication skills, strong attention to detail and the ability to manage multiple deadlines are essential. Relevant certifications such as CISA, CRISC, CISSP or ISO 27001 credentials are desirable but not mandatory.

COMPETITIVE SALARY
Added 11/09/2026
Reference: 6cg59mpjf7c1qg7gw0yf

Cyber Security Controls Tester (Contractor)

Sandwich, England, United Kingdom Contract Penetration Tester

Other similar jobs

Security Architect (Contractor) Cyber Security Consultant

Added 11/09/2026

We are seeking an experienced Security Architect (Contractor) Cyber Security Consultant to provide specialist expertise across a range of security architecture, design and advisory activities. The successful candidate will assess existing technology environments, identify security risks and develop practical, proportionate controls that support business and operational objectives. You will work with technical and business stakeholders to embed secure-by-design principles across infrastructure, applications, cloud services, networks and data platforms. Key responsibilities will include producing and reviewing security architecture principles, standards, patterns and design documentation; contributing to security reviews and risk assessments; and advising on the design and implementation of appropriate preventative,...

Learn more

Penetration Testing Consultant (Cyber Security)

Added 30/09/2026

We are seeking a Penetration Testing Consultant (Cyber Security) to assess the security of applications, infrastructure, networks and cloud environments. You will plan and deliver penetration tests, vulnerability assessments and security reviews, identifying weaknesses before they can be exploited. The role involves conducting tests across web applications, APIs, mobile platforms, internal and external networks, wireless environments and cloud services, using a combination of industry-standard tools and manual testing techniques. You will be expected to assess business risk, validate findings and provide practical recommendations that support effective remediation. Key responsibilities include defining test scopes and methodologies, gathering intelligence, performing controlled exploitation,...

Learn more

Security Engineer (Contractor)

Added 18/09/2026

We are seeking a Security Engineer (Contractor) to support the design, implementation and continuous improvement of secure technology environments. The successful candidate will work across infrastructure, cloud, applications and operational teams to identify security risks, implement effective controls and help maintain resilience against evolving threats. This is a hands-on contract role suited to an engineer who can work independently, communicate clearly and deliver practical security outcomes within agreed timelines. Key responsibilities will include monitoring and investigating security events, supporting incident response activities and conducting vulnerability assessments across systems and applications. You will configure and maintain security technologies such as endpoint...

Learn more

Security Engineer (Contractor)

Added 18/09/2026

We are seeking a Security Engineer (Contractor) to help protect enterprise systems, applications, networks, and data across a dynamic technology environment. The successful candidate will work closely with infrastructure, software development, operations, and risk teams to identify security weaknesses, implement effective controls, and support the continuous improvement of security practices. This is a hands-on role suited to an experienced professional who can operate independently, manage competing priorities, and communicate clearly with both technical and non-technical stakeholders. Key responsibilities include monitoring and investigating security events, supporting incident response activities, and conducting vulnerability assessments across infrastructure, cloud services, endpoints, and applications. You...

Learn more

Data Protection Officer (Fractional Contractor)

Added 16/10/2026

We are seeking an experienced Data Protection Officer (Fractional Contractor) to provide specialist privacy and data protection support on a part-time, flexible basis. The successful candidate will act as an independent adviser on compliance with UK data protection legislation, including the UK GDPR and Data Protection Act 2018, helping to maintain effective governance and promote a strong culture of privacy across the organisation. This role is suited to a confident practitioner who can quickly understand business requirements, identify risk and provide clear, proportionate advice to stakeholders at all levels. Key responsibilities will include monitoring compliance with data protection policies and...

Learn more

Risk & Controls Analyst (Cyber & Technology)

Added 15/10/2026

We are seeking a Risk & Controls Analyst (Cyber & Technology) to support the effective management of technology, information security and cyber risks across a complex business environment. The role will help strengthen the control framework, improve risk visibility and provide constructive challenge to ensure that key risks are identified, assessed and managed within agreed appetite. Responsibilities will include maintaining risk and control documentation, supporting risk and control assessments, and helping to identify gaps, weaknesses and opportunities for improvement. You will coordinate control testing and assurance activity, review evidence, track remediation plans and monitor actions through to completion. The role...

Learn more

Risk & Controls Analyst (Cyber & Technology)

Added 15/10/2026

We are seeking a Risk & Controls Analyst (Cyber & Technology) to support the effective identification, assessment and management of technology and information security risks. This role will work with stakeholders across technology, security, risk and business functions to assess the design and operating effectiveness of controls, identify areas for improvement and promote consistent risk management practices. Responsibilities will include maintaining risk and control assessments, supporting the development and monitoring of key risk and performance indicators, and contributing to the management of issues, actions and remediation plans. You will assist with control testing, evidence gathering and the preparation of clear...

Learn more

Risk & Controls Manager (Cyber & Technology)

Added 15/10/2026

We are seeking an experienced Risk & Controls Manager (Cyber & Technology) to strengthen the management of technology and cyber risk across a complex organisation. This role will provide effective challenge, oversight and practical guidance to ensure that technology services, information assets and security processes are managed within an appropriate risk and control framework. You will work closely with senior stakeholders, technology teams, risk specialists and control owners to promote strong governance and a consistent approach to risk management. Key responsibilities will include maintaining and enhancing cyber and technology risk frameworks, policies, standards and control libraries; identifying, assessing and monitoring...

Learn more

Risk & Controls Analyst (Cyber & Technology)

Added 15/10/2026

We are seeking a Risk & Controls Analyst (Cyber & Technology) to support the effective management of technology, information security and operational risks across a complex business environment. This role will help strengthen the control framework, promote consistent risk management practices and provide insight into the organisation’s cyber and technology risk profile. You will work with stakeholders across technology, security, risk, compliance and business functions, building constructive relationships and helping teams understand and manage their control responsibilities. Key responsibilities will include maintaining risk and control documentation, coordinating control assessments and supporting the identification, evaluation and treatment of cyber and technology...

Learn more

Risk & Controls Analyst (Cyber & Technology)

Added 15/10/2026

We are seeking a Risk & Controls Analyst (Cyber & Technology) to support the effective identification, assessment and management of technology and information security risks. Working with stakeholders across technology, cyber security, risk, audit and the wider business, you will help strengthen the control environment and promote consistent, risk-based practices across the organisation. Your responsibilities will include maintaining risk and control registers, coordinating control assessments, reviewing evidence and monitoring remediation activity. You will support the design, implementation and testing of controls relating to areas such as access management, vulnerability management, change management, incident response, third-party risk, data protection and business...

Learn more

Risk & Controls Manager (Cyber & Technology)

Added 15/10/2026

We are seeking an experienced Risk & Controls Manager (Cyber & Technology) to strengthen the management of technology, information security and cyber risk across a complex organisation. This role will provide independent challenge, practical guidance and oversight of the control environment, helping to ensure that key risks are identified, assessed, treated and reported effectively. You will work closely with technology, cyber security, operational risk, audit, compliance and business stakeholders to promote strong risk management practices and resilient ways of working. Key responsibilities will include maintaining and enhancing cyber and technology risk frameworks, policies, standards and control methodologies; facilitating risk and...

Learn more

Risk & Controls Manager (Cyber & Technology)

Added 15/10/2026

We are seeking an experienced Risk & Controls Manager (Cyber & Technology) to strengthen the management of technology, information security and operational risks across a complex organisation. This role will provide independent challenge, practical guidance and assurance over the design and effectiveness of controls, helping to maintain a robust risk management framework and support informed decision-making at all levels. You will partner with technology, cyber security, risk, compliance, audit and business stakeholders to identify, assess and monitor risks across areas including cyber security, infrastructure, cloud services, third-party providers, data protection, resilience and technology change. Key responsibilities will include maintaining risk...

Learn more

Risk & Controls Manager (Cyber & Technology)

Added 15/10/2026

We are seeking an experienced Risk & Controls Manager (Cyber & Technology) to strengthen the management of technology and information security risks across a complex, regulated environment. You will provide constructive challenge, practical advice and independent oversight, helping the business to identify, assess and manage risks within appetite while supporting the delivery of strategic technology objectives. Key responsibilities will include maintaining and enhancing cyber and technology risk and control frameworks; conducting risk assessments, control reviews and thematic deep dives; and monitoring the effectiveness of preventative and detective controls. You will oversee the identification, recording and remediation of control weaknesses, ensuring...

Learn more

Risk & Controls Consulting - Cyber

Added 07/10/2026

We are seeking an experienced professional to join a Cyber Risk and Controls Consulting team. In this role, you will help organisations identify, assess and manage technology and cyber risks across complex business environments. You will work with stakeholders at different levels to understand their objectives, evaluate existing controls and provide practical recommendations that strengthen security, resilience and regulatory compliance. Your responsibilities will include planning and delivering cyber risk assessments, control reviews and maturity assessments; analysing security policies, standards, processes and technical safeguards; and identifying gaps against recognised frameworks and regulatory requirements. You will support the development of risk registers,...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.