Control Testing Analyst (Lead)

We are a leading trading platform that is ambitiously expanding to the four corners of the globe. Our top-rated products have won prestigious industry awards for their cutting-edge technology and seamless client experience. We deliver only the best, so we are always in search of the best people to join our ever-growing talented team.

This role is the operational backbone of the Control Testing function. The focus is on planning and executing control tests across business processes, engaging first-line teams, tracking remediation, and building risk and control awareness across the organisation. The right person brings solid experience in operational risk or tech risk, strong stakeholder skills, and the ability to work independently across a wide range of business areas. They will play a central part in embedding a healthy control culture at Capital.com.

Responsibilities Control Testing Execution

Plan, execute, and document control testing activities across operational or tech risk domains — covering both design and operating effectiveness

Perform periodic assessments of high-risk business areas including customer onboarding, AML processes, payment operations, financial promotions, and data protection

Identify control gaps, weaknesses, and process failures through structured walkthroughs, sample testing, and review of evidence

Produce clear, well-evidenced test workpapers that meet internal quality standards and can withstand regulatory scrutiny

Issue Management & Remediation

Document findings and communicate them clearly to control owners and senior stakeholders

Work with first-line teams to agree root cause analysis and develop practical, time-bound remediation plans

Track open issues through to closure, conducting follow-up testing to validate that corrective actions have been implemented effectively

Maintain the issues register and provide regular status updates to the Head of Control Testing

Risk Culture & Stakeholder Engagement

Act as a visible, credible presence across business functions — building relationships that make control testing a collaborative process rather than an adversarial one

Support the development of risk and control awareness across the organisation, helping first-line teams understand why controls matter and how to own them effectively

Deliver guidance and informal coaching to control owners on control design, evidence requirements, and good practice

Represent the Control Testing function in cross-functional forums, risk committees, and working groups as required

Reporting & Framework Support

Contribute to the preparation of control testing reports and dashboards for senior management and risk committees

Support the maintenance and development of the control library, ensuring controls are accurately mapped to risks and business processes

Assist in preparing documentation for regulatory audits and examinations

Provide input to the annual Control Testing Plan, drawing on knowledge of operational risk areas and business change

Requirements Experience

5–8 years of proven experience in control testing, operational risk, tech risk or internal audit within financial services or regulated FinTech

Proven ability to execute tests of controls independently, from planning through to final report

Experience engaging with first-line business teams in a second-line capacity

Familiarity with multi-jurisdiction regulatory requirements — experience across FCA, CySEC, or ASIC environments is advantageous

Experience supporting or preparing for regulatory audits and examinations

Knowledge

Sound understanding of operational risk frameworks (e.g., COSO, ISO 31000) and how they apply in a regulated financial services context

Knowledge of key regulatory obligations relevant to a financial institution — including Consumer Duty, AML, GDPR, and best execution

Familiarity with control testing methodologies and issue management processes

Comfortable using GRC tools, Excel, and reporting platforms to manage and present testing output

Personal Attributes

Strong interpersonal and communication skills — able to engage at all levels, from operational staff to senior management

Self-starter with the confidence to manage workload independently and take ownership of outcomes

Methodical and detail-oriented, with a natural instinct to question and verify

Genuine interest in building a risk-aware culture, not just completing a testing checklist

Adaptable and resilient — comfortable working in a function that is still being built and where the scope will evolve

Desirable Qualifications

Bachelor's degree in Finance, Business, Risk Management, Law, or a related field

Professional certification such as IRM, ICA, CIA, or equivalent

What you will get in return:

• Competitive Salary: We believe great work deserves great pay! Your skills and talents will be rewarded with a salary that makes you feel valued and motivated. • Work-Life Harmony: Join a company that genuinely cares about you - because your life outside of work matters just as much as your time on the clock. #LI-Hybrid • Generous Time Off: Need a breather? Our annual leave policy lets you recharge and enjoy life outside of work without a worry. • Employee Referral Program: Love working here? Share the love! Bring your talented friends on board and get rewarded for growing our awesome team. • Comprehensive Health & Pension Benefits: From medical insurance to pension plans, we’ve got your back. Plus, location-specific benefits and perks! • Workation Wonderland: Live your digital nomad dreams with 30 extra days to work remotely from anywhere in the world (some restrictions apply). Adventure awaits! • Volunteer Days: Make a difference! Take two additional paid days each year to support causes you care about and give back to the community.

Be a key player at the forefront of the digital assets movement, propelling your career to new heights! Join a dynamic and rapidly expanding company that values and rewards talent, initiative, and creativity. Work alongside one of the most brilliant teams in the industry.

Our company has an Internal Reporting Procedure. It is available from the Human Resources Department upon request hr@capital.com. You may report a violation referred to in the Procedure under the terms specified therein.