Impress employers and recruiters.
Choose from hundreds of resume examples.

Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

About the Role

The 1st Line Control Office function within Vocalink Limited (VLL) is seeking a Manager to join the Control Testing, Certification and Assurance team. This role will manage Certifications, Certification Audits, and other Assurance activities, including control testing, to support VLL’s certifications and assurance obligations.

Responsibilities

• Maintain certification and assurance related documentation.
• Prepare the organisation for annual certification audits.
• Support the assessment and validation of controls and processes against security standards and obligations.
• Support the team in the management of VLL certifications (e.g., ISO27001 and PCI DSS).
• Support the team in the management of other assurance activities (e.g., ISAE3000).
• Conduct periodic testing of key and non-key controls.
• Evaluate compliance with internal policies, standards, regulatory requirements, and customer obligations.
• Prepare and review control testing documentation, including test procedures, results, and identified gaps.
• Ensure timely escalation of control deficiencies and support remediation tracking.
• Create and quality assure reports and team outputs.
• Supervise and mentor junior team members, providing guidance on certification and assurance requirements, testing execution, and quality assurance.
• Support the Vice President and Director of Certification and Assurance in developing the annual Control Testing, Certification and Assurance plan.
• Build and maintain strong partnerships with Control and Process Owners and Operators.
• Contribute to reporting for governance forums, including dashboards, thematic reviews, and trend analysis.
• Support the development and refinement of certification management, assurance/control testing processes, standards, tools, and methodologies.
• Contribute to the maturity of the 3 Lines of Defence model and promote a culture of proactive risk management.
• Stay informed on emerging risks, regulatory changes, certification changes, and industry best practices, focusing on cybersecurity risks.

Requirements

• Experience working with security related control frameworks and standards (e.g., ISO27001, NIST, CRI, or PCI-DSS).
• Experience conducting security related audits/reviews and managing/coordinating external audits including certification audits.
• Ability to assess control design and operating effectiveness in complex environments and to identify control gaps and improvement opportunities.
• Experience resolving certification and assurance issues.
• Knowledge and experience of all areas of security.
• Strong investigative and analytical experience (e.g., enquiry, scanning, analysis, interviewing, testing), problem-solving, and decision-making skills.
• Experience collaborating cross-functionally to identify and implement good practice security audit management and assurance processes.
• Excellent communication and stakeholder engagement skills.
• Abide by Mastercard’s security policies and practices.
• Ensure the confidentiality and integrity of the information being accessed.
• Report any suspected information security violation or breach.
• Complete all periodic mandatory security trainings.

Skills

• ISO 27001
• ISO 22301
• PCI DSS
• PCI PIN
• SWIFT CSP
• ISAE 3000
• Microsoft Office Suite (MS Word, MS Excel, MS Access and MS PowerPoint)
• Risk Management / GRC related technologies and toolsets

Location

• 200+ countries and territories worldwide

Work Type

• Full-time

Experience Level

• Manager

Education Level

• Bachelor’s degree in Computer Science, Cyber Security, Information Technology, or a related field is preferred.
• Certifications such as ISO27001 Lead Auditor, CISA, CISM, CISSP, PCI SSC ISA, CRISC, or equivalent is desirable.

About the Company

• Mastercard powers economies and empowers people in 200+ countries and territories worldwide.
• We are helping build a sustainable economy where everyone can prosper.
• We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible.
• Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.