Manager, 1st Line Controls Testing, Certification and Assurance

Our Purpose Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.

Title and Summary Manager, 1st Line Controls Testing, Certification and Assurance Main purpose of the role

The 1st Line Control Office function within Vocalink Limited (VLL) is seeking a Manager to join the Control Testing, Certification and Assurance team.

This role will be responsible for managing Certifications, Certification Audits, and other Assurance activities including conducting control testing to support the retention of VLL’s certifications across multiple frameworks and the delivery of assurance obligations.

This position requires a broad understanding of security and technology control frameworks, with hands-on experience across standards such as: ISO 27001, ISO 22301, PCI DSS, PCI PIN, SWIFT CSP, ISAE 3000 etc. The successful candidate must have proven expertise in analysing and assessing control design, implementation and operating effectiveness against at least one of these standards, ensuring compliance and identifying gaps.

The role will also include coordinating and managing external audits to ensure smooth execution, therefore, experience of this is needed.

Key Responsibilities:

• Certification and Assurance Responsibilities Maintain certification and assurance related documentation.
Prepare the organisation for annual certification audits.
Support the assessment and validation of controls and processes against a variety of security standards and obligations. Support the team in the management of VLL certifications, e.g. ISO
27001 and PCI DSS.
Support the team in the management of other assurance activities, e.g. ISAE
3000.
Conduct periodic testing of key and non-key controls in line with the Control Testing Methodology.
Evaluate compliance with internal policies, standards, regulatory requirements, and customer obligations.
Prepare and review control testing documentation, including test procedures, results, and identified gaps.
Ensure timely escalation of control deficiencies and support remediation tracking.
Create and quality assure reports and team outputs.
• Team Leadership, Collaboration & Stakeholder Engagement Supervise and mentor junior team members (e.g. Senior Analysts), providing guidance on certification requirements, assurance requirements, testing execution and quality assurance.
Support the Vice President and Director of Certification and Assurance in the development and maintenance of the annual Control Testing, Certification and Assurance plan. Build and maintain strong partnerships with Control and Process Owners and Operators to ensure efficient and effective execution of certification maintenance and assurance activities.
Contribute to reporting for governance forums, including dashboards, thematic reviews, and trend analysis.
• Governance & Continuous ImprovementSupport the development and refinement of certification management, assurance/control testing processes, standards, tools, and methodologies.
Contribute to the maturity of the 3 Lines of Defence model and promote a culture of proactive risk management.
Stay informed on emerging risks, regulatory changes, certification changes and industry best practices with a focus on cybersecurity risks.

Experience
• Experience of working with security related control frameworks and standards (e.g. ISO
27001, NIST,…