Control Testing Analyst (Lead)

We are a leading trading platform that is ambitiously expanding to the four corners of the globe. Our top-rated products have won prestigious industry awards for their cutting-edge technology and seamless client experience. We deliver only the best, so we are always in search of the best people to join our ever-growing talented team. This role is the operational backbone of the Control Testing function. The focus is on planning and executing control tests across business processes, engaging first-line teams, tracking remediation, and building risk and control awareness across the organisation. The right person brings solid experience in operational risk or tech risk, strong stakeholder skills, and the ability to work independently across a wide range of business areas. They will play a central part in embedding a healthy control culture at Capital.com. Responsibilities

Control Testing Execution

• Plan, execute, and document control testing activities across operational or tech risk domains — covering both design and operating effectiveness

• Perform periodic assessments of high-risk business areas including customer onboarding, AML processes, payment operations, financial promotions, and data protection

• Identify control gaps, weaknesses, and process failures through structured walkthroughs, sample testing, and review of evidence

• Produce clear, well-evidenced test workpapers that meet internal quality standards and can withstand regulatory scrutiny

Issue Management & Remediation

• Document findings and communicate them clearly to control owners and senior stakeholders

• Work with first-line teams to agree root cause analysis and develop practical, time-bound remediation plans

• Track open issues through to closure, conducting follow-up testing to validate that corrective actions have been implemented effectively

• Maintain the issues register and provide regular status updates to the Head of Control Testing

Risk Culture & Stakeholder Engagement

• Act as a visible, credible presence across business functions — building relationships that make control testing a collaborative process rather than an adversarial one

• Support the development of risk and control awareness across the organisation, helping first-line teams understand why controls matter and how to own them effectively

• Deliver guidance and informal coaching to control owners on control design, evidence requirements, and good practice

• Represent the Control Testing function in cross-functional forums, risk committees, and working groups as required

Reporting & Framework Support

• Contribute to the preparation of control testing reports and dashboards for senior management and risk committees

• Support the maintenance and development of the control library, ensuring controls are accurately mapped to risks and business processes

• Assist in preparing documentation for regulatory audits and examinations

• Provide input to the annual Control Testing Plan, drawing on knowledge of operational risk areas and business change

Requirements

Experience

• 5–8 years of proven experience in control testing, operational risk, tech risk or internal audit within financial services or regulated FinTech

• Proven ability to execute tests of controls independently, from planning through to final report

• Experience engaging with first-line business teams in a second-line capacity

• Familiarity with multi-jurisdiction regulatory requirements — experience across FCA, CySEC, or ASIC environments is advantageous

• Experience supporting or preparing for regulatory audits and examinations

Knowledge

• Sound understanding of operational risk frameworks (e.g., COSO, ISO 31000) and how they apply in a regulated financial services context

• Knowledge of key regulatory obligations relevant to a financial institution — including Consumer Duty, AML, GDPR, and best execution

• Familiarity with control testing methodologies and issue management processes

• Comfortable using GRC tools, Excel, and reporting platforms to manage and present testing output

Personal Attributes

• Strong interpersonal and communication skills — able to engage at all levels, from operational staff to senior management

• Self-starter with the confidence to manage workload independently and take ownership of outcomes

• Methodical and detail-oriented, with a natural instinct to question and verify

• Genuine interest in building a risk-aware culture, not just completing a testing checklist

• Adaptable and resilient — comfortable working in a function that is still being built and where the scope will evolve

Qualifications

• Bachelor's degree in Finance, Business, Risk Management, Law, or a related field

• Professional certification such as IRM, ICA, CIA, or equivalent is desirable

What you will get in return:

• Competitive Salary: We believe great work deserves great pay! Your skills and talents will be rewarded with a salary that makes you feel valued and motivated.

• Work-Life Harmony: Join a company that genuinely cares about you - because your life outside of work matters just as much as your time on the clock. #LI-Hybrid

• Generous Time Off: Need a breather? Our annual leave policy lets you recharge and enjoy life outside of work without a worry.

• Employee Referral Program: Love working here? Share the love! Bring your talented friends on board and get rewarded for growing our awesome team.

• Comprehensive Health & Pension Benefits: From medical insurance to pension plans, we’ve got your back. Plus, location-specific benefits and perks!

• Workation Wonderland: Live your digital nomad dreams with 30 extra days to work remotely from anywhere in the world (some restrictions apply). Adventure awaits!

• Volunteer Days: Make a difference! Take two additional paid days each year to support causes you care about and give back to the community.

Be a key player at the forefront of the digital assets movement, propelling your career to new heights! Join a dynamic and rapidly expanding company that values and rewards talent, initiative, and creativity. Work alongside one of the most brilliant teams in the industry.

Our company has an Internal Reporting Procedure. It is available from the Human Resources Department upon request hr@capital.com. You may report a violation referred to in the Procedure under the terms specified therein.