Test Analyst

Job Description:

IT Controls Testing Analyst

Some careers grow faster than others.

If youre looking for a role where you can make a real impact, join a team that supports strong risk management, effective governance, and confident programme delivery through independent controls assurance.

We are seeking an IT Controls Testing Analyst to support the delivery of independent IT controls testing strategic programs and change initiatives, with a particular focus on programme closure assurance. The role will provide objective assessment of control design, operating effectiveness, remediation completion, and residual risk exposure to support informed closure decisions.

The Opportunity

The IT Controls Testing Analyst will execute independent testing activities across technology and operational control environments, helping to ensure that programme risks are appropriately identified, treated, evidenced, and governed before closure. The role requires strong analytical capability, sound judgement, and the ability to engage confidently with stakeholders while maintaining independence and objectivity.

Principal Responsibilities

• Support the planning and execution of independent IT controls testing for a key change programme.
• Assess the design adequacy and operating effectiveness of IT controls across relevant risk areas, including access management, change management, cyber/security, data, resilience, and operational controls.
• Perform testing to support programme closure readiness, validating that required controls, remediation actions, and risk treatment activities have been completed and appropriately evidenced.
• Review and challenge supporting artefacts, documentation, and management assertions to confirm completeness, quality, and sustainability of control operation.
• Identify control deficiencies, gaps, and residual risks, and document findings in a clear, concise, and evidence-based manner.
• Track testing outcomes, issues, and agreed actions through to closure, escalation, or formal risk acceptance.
• Produce testing workpapers, assurance summaries, and management reporting suitable for governance, audit, and regulatory review.
• Maintain high standards of documentation, traceability, consistency, and quality throughout the testing lifecycle.
• Engage effectively with programme teams, control owners, technology teams, risk colleagues, and other assurance functions while preserving independence of assessment.
• Contribute to the continuous improvement of testing methodologies, templates, standards, and quality assurance practices.

Requirements

To be successful in this role you should meet the following requirements:

• Proven experience in IT controls testing, IT risk, internal controls assurance, technology audit, or a related risk and control discipline.
• Good understanding of IT general controls and broader technology control environments in areas such as identity and access management, change control, incident/problem management, SDLC, infrastructure, cyber security, resilience, and data controls.
• Experience assessing both control design effectiveness and operating effectiveness using documented testing approaches and evidence review.
• Ability to evaluate remediation evidence and determine whether identified issues have been adequately addressed.
• Strong analytical skills, attention to detail, and the ability to form balanced, evidence-based conclusions.
• Strong written and verbal communication skills, with the ability to present findings clearly to technical and non-technical stakeholders.
• Ability to work independently, manage competing priorities, and deliver high-quality outputs within agreed timelines.
• Experience working in a large, complex, and preferably regulated environment would be advantageous.

Qualifications

• Bachelors degree or equivalent experience in Information Technology, Cybersecurity, Risk, Audit, or a related field.
• Professional certifications such as CISA, CRISC, CISSP, ITIL, or ISO 27001 are advantageous.

The role holder will demonstrate

• A high degree of integrity, independence, and professional judgement
• Strong risk and control awareness
• A structured and disciplined approach to testing and documentation
• Confidence in constructive challenge and stakeholder engagement
• Commitment to quality, consistency, and continuous improvement

Why join us

This role offers the opportunity to contribute to stronger programme outcomes and better risk management by providing independent, high-quality assurance at critical decision points. You will work across strategic initiatives, engage with a broad stakeholder network, and help strengthen the control environment in a meaningful and visible way.