Control Testing & Assurance Manager

at  Thames Water Utilites

In Team Digital, we’re planning for a future where the technology solutions we co-create and design enable us to achieve our goal to protect our greatest natural resource and allow our customers, communities and the environment to thrive.
As a team, our vision is to create an everyday digital experience for the people we serve - our customers - by putting them at the heart of everything we do. As part of our award-winning team you’ll help the business become an intelligent, connected organisation in order to deliver our digital transformation and turnaround… as part of the X team what role are they playing in making this happen.
As the controls and compliance programme test lead you will be part of the Information Security team, particularly focussed on setting up and running the Controls and Compliance Programme in planning, organising, overseeing, and delivering the testing for each area of Information Security, across Information Technology [IT], Operational Technology [OT], Business Lines and Functions. Ensuring execution of a comprehensive and thorough test plan to ensure overall Policy Effectiveness

WHAT YOU’LL BE DOING AS A CONTROL TESTING & ASSURANCE MANAGER

This role is required to provide assurance as to the design and operational effectiveness of the Information Security Policy and Standards. It is a critical part of any cyber security program that controls are deployed and then tested to ensure that they provide the level of security that they should be.

• Manage the documentation of distinct control types, covering key aspects, such as remit, main processes and handovers to other teams.
• Supervise the delivery of assigned control assessment by using experience and knowledge to intervene and redirect testing as required, resolving or redirecting escalations as required.
• Ensure that assigned control assessments are accurate, effective, abide by procedures and templates and meet quality control requirements.
• Manage control owners and other stakeholders, ensuring the success of each assigned review, minimising contention where possible and requesting support where necessary.
• You will need to make sure that each test plan is well planned and thought out to maximise success with the existing users.

Base Location – Hybrid – Clear Water Court Reading
Working Pattern – 36 hours

WHAT YOU SHOULD BRING TO THE ROLE

We want to bring together a team of brilliant tech minds with game changing ideas. We’re looking for people who will help us re-imagine the way we work and the way we get things done:

• A truly digital mindset. Open to collaboration. Open to risk. Open to new ways of doing things.
• Obsessed with data. Obsessed with excellence.
• People who think and behave differently to the way we do. People who don’t want to just be another cog in the machine.
• Extent experience in Digital, Technology and risk management.
• Ability to work with broad requirements and formulate and concise tailored response.
• Proven ability to design and deploy a Control testing methodology from scratch
• Certified in Risk and Information System Controls
• Certified Auditor or proven Audit Experience
• A technical qualification of any security associated discipline
• Continuous testing experience

Desirable

• Experience working in a regulated environment