IT & Software

Manager, 1st Line Controls Testing, Certification and Assurance

MasterCard

London · Greater London · United Kingdom

Overview

In this role you will lead Certification, Certification Audits and Assurance activities to sustain Mastercard’s 1st Line controls across security standards. You will oversee testing, documentation and remediation to uphold frameworks like ISO27001, PCI DSS, and ISAE3000, coordinating external audits. You’ll partner with control owners and leadership to drive continuous improvement, risk management and governance reporting. This is a chance to shape assurance processes in a security-centric, multi-framework environment at scale.

Responsibilities
  • Maintain certification and assurance documentation and prepare for annual audits
  • Assess controls against security standards and support certification management (ISO27001, PCI DSS, ISAE3000)
  • Conduct periodic control testing and document procedures, results, and gaps
  • Manage escalation of deficiencies and track remediation
  • Create and quality assure reports for governance and stakeholders
  • Supervise and mentor junior analysts and support senior leadership in planning
  • Develop and maintain the Control Testing, Certification and Assurance plan
  • Foster partnerships with control owners and operators for effective certification maintenance
  • Contribute to governance dashboards, reviews and trend analysis
  • Advance certification management processes and promote proactive risk management
Key requirements
  • Experience with security control frameworks and audits (ISO27001, NIST, PCI-DSS, etc.)
  • Ability to assess control design and operating effectiveness and identify gaps
  • Experience coordinating external audits and certification processes
  • Strong analytical, investigative, problem-solving and decision-making skills
  • Excellent communication and stakeholder engagement
  • Cross-functional collaboration and assurance process expertise
  • excellent communication
  • stakeholder engagement
  • collaboration
  • ISO27001
  • PCI DSS
  • ISAE3000

Reference: WJ-747_30860816

Apply now

Continue on the employer's official application - the same link they use for every candidate.

More jobs

Find more on GigBlows

This role is listed on GigBlows for discovery and search. Hiring decisions and applications are handled by the employer or their chosen application system.