IT Security Controls Specialist

Security Controls Specialist
Permanent Salary: £43,000 to £58,000 (DoE)
Location: Edinburgh
Working Arrangement: Hybrid - 2-3 days on site

This role has an on-site requirement in Edinburgh every week, please only apply if you can commit to this travel.

Sponsorship is unavailable for this role.

Your new company:

I'm currently looking for muliple security controls specialists to work for a modern financial institution to assist with the maintenance, enhancement and assurance of IT General Controls and IT Application Controls (ITGC and ITAC) during a period of rapid change. The ideal candidate will have a financial services background, experience driving and testing first line IT controls, and may have come from either an information security, IT audit or cyber risk background with the relevant framework knowledge that comes with this role type (NIST, ISO27001).

This role involves:

Technical control monitoring, testing and enhancement
Testing business-wide security controls against an annual schedule
Supporting information assurance partners
Scheme attestations - thorough reviews of control statements
Supporting technical operations, supplier management and operational resilience teams on risks, with the view to creating, driving and providing assurance on preventative, detective and directive technical controls
Working with key stakeholders and embedding your understanding of information security from a controls perspective
Taking ownership of assurance activities pertaining to technical controls
Working from within the first line of defence (1LOD) on the continual enhancements of technical controls using your knowledge of contemporary risks and the controls to mitigate, escalate or accept them.

What I'm looking for


A background in financial services, fintech or accountancy / consultancy sector environments working on technical IT controls and IT risk
Knowledge of what a good control looks like alongside the knowledge and ability of how to effectively test controls
Understanding of core technology and information security frameworks (NIST, ISO27001)
Excellent articulative ability
Demonstrable experience working within IT audit, IT risk management, technical controls testing/management or IT assurance related roles
Experience testing controls and enhancing information security and IT risk policies
Relevant industry certifications are desirable, as is the drive to achieve them.
Willingness to learn

What you'll get in return:


£43,000 - £58,000 per annum
Performance Bonus
Company benefits (discounts, insurance etc).
Private medical insurance
Good pension scheme

Hays Specialist Recruitment Limited acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept the T&C's, Privacy Policy and Disclaimers which can be found at (url removed)