Technology Control Testing Lead, Capital.com
+ Annual Performance Bonus
Trading platform & app
Posted today
Trading platform & app
501-1000 employees
Posted today
+ Annual Performance Bonus
501-1000 employees
Company mission
To make the world of finance more accessible, engaging and useful.
Role
Who you are
- 5-7 years of experience in technology risk management, IT audit, or control testing within a regulated FinTech or financial services environment
- Strong background in assessing IT and cybersecurity controls, including experience with cloud environments, DevSecOps practices, and digital payment platforms
- Proven ability to perform test of controls (design and operating effectiveness)
- Strong understanding of operational processes, risk frameworks, and regulatory requirements
- Proficiency in using governance, risk, and compliance (GRC) tools and control testing platforms
- Familiarity with IT control frameworks such as NIST Cybersecurity Framework, ISO 27001, and COBIT
- Proficiency with GRC platforms and testing tools (e.g., RSA Archer, ServiceNow, or LogicGate)
- Advanced knowledge of data analysis tools (e.g., Excel, SQL) and reporting tools (e.g., Tableau, Power BI)
- Strong understanding of cloud security, data protection
- Technologies, and cybersecurity protocols
- Experience in managing regulatory audits
- Ability to work collaboratively with regional and global partners in other functional units; ability to navigate a complex organisation; to influence and lead people across cultures at a senior level
- Excellent problem-solving skills, inquisitive nature and comfort challenging current practices
- Proven track record of taking ideas forward without supervision and challenging others, where appropriate
- Adapt at developing relationships with senior business executives with a reputation for partnering across organisation lines to mitigate risks
- Highly disciplined, able to work with limited supervision and make independent decisions
- Strong organisational, project management, and multi-tasking skills with demonstrated ability to manage expectations and deliver results
- High level of professionalism, self-motivation, and sense of urgency
- Bachelor’s degree in Computer Science, Information Technology, Risk Management, or a related field
- Advanced degree (e.g., MS in Cybersecurity, MBA) is a plus
What the job involves
- We are a leading trading platform that is ambitiously expanding to the four corners of the globe
- Our top-rated products have won prestigious industry awards for their cutting-edge technology and seamless client experience
- We deliver only the best, so we are always in search of the best people to join our ever-growing talented team
- Design and maintain a robust technology control testing framework aligned with risk management standards (e.g. , NIST, ISO 27001, COBIT, ITIL)
- Develop and update testing methodologies, ensuring they address key risks related to IT infrastructure, cybersecurity, cloud services, and software development
- Establish and maintain control testing policies and procedures that align with regulatory and internal governance requirements
- Ensure the control testing framework integrates seamlessly with the broader Operational Risk Management Framework (ORMF)
- Maintain a comprehensive control library, mapping controls to risks and business objectives
- Plan and execute detailed control testing activities across IT operations, systems, and processes, including:
- Cybersecurity controls (e.g. , firewalls, encryption, access management)
- Cloud computing controls (e.g. , AWS, Azure, Google Cloud)
- Data protection controls (e.g. , GDPR compliance, data backups)
- Incident management processes and disaster recovery testing
- Test both the design and operating effectiveness of IT controls
- Prioritise control testing activities based on risk assessments, focusing on high-risk areas such as payment systems, customer data protection, and regulatory reporting
- Document and communicate control deficiencies to relevant stakeholders
- Work with technology teams to develop, track, and implement remediation plans to address identified control gaps
- Perform follow-up testing to validate the resolution of issues and confirm effectiveness
- Assess IT controls of third-party vendors and service providers, ensuring compliance with contractual and regulatory obligations
- Support vendor risk management activities by evaluating third-party cybersecurity and IT governance controls
- Document findings and control weaknesses, ensuring they are communicated clearly to relevant stakeholders
- Work with control owners and process teams to develop and track remediation plans for identified deficiencies, ensuring timely resolution
- Conduct follow-up testing to validate the implementation and effectiveness of corrective actions
- Collaborate with risk teams to ensure control testing aligns with the organisation’s risk assessment and regulatory requirements
- Present findings and recommendations to senior leadership, providing actionable insights to improve the control environment
- Support regulatory audits and examinations by providing control testing documentation and responding to inquiries
- Ensure the organisation is prepared for external reviews of its control environment
Salary benchmarks
Our take
Historically, the wealth-building opportunities afforded by investment have been reserved for those who already have money to spare, but Capital.com is working to change this. The company supplies a trading platform for everyday people to access trading opportunities and training resources, harnessing the power of technology to do so.
Founded in 2016, Capital.com is now a global company, boasting year-on-year growth since it was launched. Its platform gives users access to over 3,700 markets for investing directly in global stocks and ETFs, or trade derivatives across the world. Focused on removing the barriers of entry for trading, the company supplies 24/7 customer service, on top of learning tools such as rolling news feeds, access to a demo account, and a YouTube channel.
Capital.com is one of Europe’s fastest-growing investment-trading platforms and aims to continue its expansion whilst solidifying current operations. With an active and growing user base, that continued to grow despite a downturn in the market in 2022, the company is poised to maintain its successes into the future.
Steph
Company Specialist at Welcome to the Jungle
Insights
-3% employee growth in 12 months
Company
Funding (1 round)
Jul 2017
$25m
SERIES A
Total funding: $25m
Company benefits
- Private health insurance
- Virtual GP
- Hybrid working
- Option to work abroad (up to 30 days a year)
- Local gym discounts
- Enhanced pension
- Volunteering days
- Hybrid working
- New office in Westminster, London
- Subsidised eye care
- Bereavement support
- Enhanced family leave
- Season ticket loan and cycle to work scheme
Company values
- Care: Building strong relationships is at the core of what we do. We want those who value others
- Be Clear: Whether it’s interacting with clients or colleagues, being able to get your message across clearly is essential
- Be Bold: Making a new product means venturing into the unknown. We need those who can take risks, make assertive decisions, and solve problems
- Explore And Discover: Change requires new ideas, and we want those who enjoy experimenting and learning about new things
- Move Fast: We like to move quickly, and managing time effectively is key to getting work done
- Focus On Outcomes: We focus on the final result, celebrating successes, and learning from failures
Company HQ
Ιστορικό Κέντρο, Λεμεσός, Λεμεσός
Articles
Leadership
Viktor Prokopenya
(Founder)Also founded Currency.com, VP Capital, exp(capital, and Viaden Media, where they were CEO.
Share this job
View 9 more jobs at Capital.com