TRS Manager

Overview

In this Technology Risk Services Manager role, you will lead cyber and information security internal audits within Grant Thornton’s Business Risk Services, guiding client engagements and developing staff. You’ll manage multiple client relationships, plan audits, perform fieldwork to GT methodologies, and deliver clear reports with actionable findings. The role blends technical risk work with leadership, financial management of client relations, and cross-geo collaboration. This opportunity lets you shape how clients strengthen controls and governance in a dynamic firm.

Pay / Benefits

• flexible working options
• work-life balance
• inclusive culture

Responsibilities

• Lead allocated cyber and information security IT internal audit engagements and oversee staff development
• Manage client relationships and deliver engaging planning conversations and audit planning documents
• Conduct fieldwork per Grant Thornton methodologies with appropriate testing and evidence
• Hold close-out meetings to explain findings and draft concise report summaries
• Assist with financial management of client relationships, including WIP monitoring, invoicing, and budgeting

Key requirements

• Professional qualification (CISA, CISM, CISP, or similar) with post-qualification experience
• Experience scoping, delivering, and reporting on cyber and information security audits
• Ability to assess and test security controls (firewalls, cloud configurations, network monitoring, anti-malware)
• Familiarity with cyber security testing, incident response, governance, and third-party assurance
• Strong interviewing, analysis, and client reporting skills
• Solid understanding of cyber security controls and frameworks (NIST, CIS, Cyber Essentials, GDPR)
• Desirable: security certifications (CISSP or CISM)
• Experience in data protection processes and GDPR compliance
• Extensive experience using audit software and Microsoft packages
• Experience managing audits and building cross-regional internal networks

• stakeholder management
• communication and report-writing
• leadership and people development
• cyber and information security internal audits
• gap and maturity assessments
• testing of security controls (firewalls, cloud configs, asset hardening)

…