Security control assurance specialist

Overview

In this role you will validate design, implementation, and ongoing effectiveness of security controls across Colt to mitigate risk and meet regulatory requirements. You will work with cross-functional teams to test, monitor, and improve controls, aligning with global frameworks. You’ll act as a key partner for audits and regulatory initiatives, translating technical controls into business risk. You’ll join a diverse, growth-focused security community that values proactive, detail-oriented problem solving and steady impact.

Pay / Benefits

• Flexible working hours and the option to work from home
• Extensive induction program with mentors
• Opportunities for further development
• Global Family Leave Policy
• Employee Assistance Program
• Inclusion & diversity networks

Responsibilities

• Plan and execute control assurance activities including testing and validation of security controls
• Develop and maintain control testing methodologies, scripts, and procedures
• Perform periodic and continuous control monitoring for ongoing effectiveness
• Identify control gaps and areas for improvement
• Assess controls against ISO 27001, NIST CSF, CIS Controls, SOC 2, NIS2
• Support regulatory and internal compliance initiatives
• Act as a point of contact for audits and provide evidence and walkthroughs
• Document testing results, findings, and risk implications
• Produce assurance reports for management and stakeholders
• Maintain control inventories and assurance documentation
• Collaborate with IT, security engineering, and business teams to assess controls
• Support remediation planning and execution

Key requirements

• 3–6+ years in information security, IT audit, or GRC
• Proven experience with security control testing and assurance
• Strong knowledge of ISO 27001/27002, NIST CSF/800-53, SOC 2/ISAE 3402, CIS Controls

• Analytical thinking
• Strong communication and stakeholder management
• Attention to detail
• Security control testing and assurance
• Regulatory and framework mapping (ISO 27001, NIST, SOC 2, CIS)
• GRC concepts and processes

…