Technology Control Testing Lead, Capital.com

Salary not provided

+ Annual Performance Bonus

SQL

AWS

GCP

Tableau

Excel

Power BI

Azure

ServiceNow

Senior level

London

Trading platform & app

Job no longer available

Trading platform & app

1001+ employees

FintechB2CTradingMobile

Job no longer available

Salary not provided

+ Annual Performance Bonus

SQL

AWS

GCP

Tableau

Excel

Power BI

Azure

ServiceNow

Senior level

London

1001+ employees

FintechB2CTradingMobile

Company mission

To empower individuals worldwide with the knowledge, tools, and confidence to make better financial decisions.

Job

Company

Role

Who you are

5-7 years of experience in technology risk management, IT audit, or control testing within a regulated FinTech or financial services environment
Strong background in assessing IT and cybersecurity controls, including experience with cloud environments, DevSecOps practices, and digital payment platforms
Proven ability to perform test of controls (design and operating effectiveness)
Strong understanding of operational processes, risk frameworks, and regulatory requirements
Proficiency in using governance, risk, and compliance (GRC) tools and control testing platforms
Familiarity with IT control frameworks such as NIST Cybersecurity Framework, ISO 27001, and COBIT
Proficiency with GRC platforms and testing tools (e.g., RSA Archer, ServiceNow, or LogicGate)
Advanced knowledge of data analysis tools (e.g., Excel, SQL) and reporting tools (e.g., Tableau, Power BI)
Strong understanding of cloud security, data protection
Technologies, and cybersecurity protocols
Experience in managing regulatory audits
Ability to work collaboratively with regional and global partners in other functional units; ability to navigate a complex organisation; to influence and lead people across cultures at a senior level
Excellent problem-solving skills, inquisitive nature and comfort challenging current practices
Proven track record of taking ideas forward without supervision and challenging others, where appropriate
Adapt at developing relationships with senior business executives with a reputation for partnering across organisation lines to mitigate risks
Highly disciplined, able to work with limited supervision and make independent decisions
Strong organisational, project management, and multi-tasking skills with demonstrated ability to manage expectations and deliver results
High level of professionalism, self-motivation, and sense of urgency
Bachelor’s degree in Computer Science, Information Technology, Risk Management, or a related field
Advanced degree (e.g., MS in Cybersecurity, MBA) is a plus

What the job involves

We are a leading trading platform that is ambitiously expanding to the four corners of the globe
Our top-rated products have won prestigious industry awards for their cutting-edge technology and seamless client experience
We deliver only the best, so we are always in search of the best people to join our ever-growing talented team
Design and maintain a robust technology control testing framework aligned with risk management standards (e.g. , NIST, ISO 27001, COBIT, ITIL)
Develop and update testing methodologies, ensuring they address key risks related to IT infrastructure, cybersecurity, cloud services, and software development
Establish and maintain control testing policies and procedures that align with regulatory and internal governance requirements
Ensure the control testing framework integrates seamlessly with the broader Operational Risk Management Framework (ORMF)
Maintain a comprehensive control library, mapping controls to risks and business objectives
Plan and execute detailed control testing activities across IT operations, systems, and processes, including:
Cybersecurity controls (e.g. , firewalls, encryption, access management)
Cloud computing controls (e.g. , AWS, Azure, Google Cloud)
Data protection controls (e.g. , GDPR compliance, data backups)
Incident management processes and disaster recovery testing
Test both the design and operating effectiveness of IT controls
Prioritise control testing activities based on risk assessments, focusing on high-risk areas such as payment systems, customer data protection, and regulatory reporting
Document and communicate control deficiencies to relevant stakeholders
Work with technology teams to develop, track, and implement remediation plans to address identified control gaps
Perform follow-up testing to validate the resolution of issues and confirm effectiveness
Assess IT controls of third-party vendors and service providers, ensuring compliance with contractual and regulatory obligations
Support vendor risk management activities by evaluating third-party cybersecurity and IT governance controls
Document findings and control weaknesses, ensuring they are communicated clearly to relevant stakeholders
Work with control owners and process teams to develop and track remediation plans for identified deficiencies, ensuring timely resolution
Conduct follow-up testing to validate the implementation and effectiveness of corrective actions
Collaborate with risk teams to ensure control testing aligns with the organisation’s risk assessment and regulatory requirements
Present findings and recommendations to senior leadership, providing actionable insights to improve the control environment
Support regulatory audits and examinations by providing control testing documentation and responding to inquiries
Ensure the organisation is prepared for external reviews of its control environment

Salary benchmarks

Our take

Historically, the wealth-building opportunities afforded by investment have been reserved for those who already have money to spare, but Capital.com is working to change this. The company supplies a trading platform for everyday people to access trading opportunities and training resources, harnessing the power of technology to do so.

Founded in 2016, Capital.com is now a global company, boasting year-on-year growth since it launched. Its platform gives users access to over 3,700 markets for investing directly in global stocks and ETFs, or trade derivatives across the world. Focused on removing the barriers of entry for trading, the company supplies 24/7 customer service, on top of learning tools such as rolling news feeds, access to a demo account, and a YouTube channel.

Capital.com is one of Europe’s fastest-growing investment-trading platforms and aims to continue its expansion whilst solidifying current operations. With an active and growing user base, that continued to grow despite a downturn in the market in 2022, the company is poised to maintain its successes into the future.