IT Audit Manager

Overview

In this role you will shape and deliver risk-based IT assurance across technology, cyber, data and digital change, guiding governance and decision-making. You will own end-to-end IT audits, lead assurance activities and act as a trusted adviser to senior technology stakeholders. You will drive modernization through data analytics, automation and AI-enabled techniques, linking control weaknesses to business impact. This is a leadership role in Internal Audit focused on delivering high-quality technology risk insight and cross-functional collaboration.

Pay / Benefits

• 30 days holiday (+5 via flex)
• Pension scheme with up to 14% employer match
• Annual bonus scheme
• Private medical insurance
• Flexible benefits including cycle to work
• Cycle to work scheme

Responsibilities

• Shape the technology audit plan through ongoing risk assessment and LV= strategy
• Own a portfolio of IT audits from scoping to follow-up within time and budget
• Lead assurance across infrastructure, cyber, IAM, data governance, resilience, and change programmes
• Modernise technology assurance with data analytics, automation and AI-enabled techniques
• Translate the Chief Audit Officer’s vision into practical technology assurance and insight
• Act as a trusted technology risk adviser at governance forums with evidence-led challenge
• Provide clear reporting to senior management and committees highlighting risks and trends
• Build and maintain relationships with CIO, CISO and leadership teams while upholding independence
• Collaborate with business auditors, external auditors and co-source partners for integrated assurance
• Stay updated on technology, cyber, AI, resilience and regulatory developments and translate into priorities
• Lead, coach and quality-review auditors and co-source specialists to strengthen capabilities
• Provide timely, independent insight on strategic technology change including cloud, data transformation and supplier-led change

Key requirements

• A recognised technology audit or security qualification (ideally CISA, CISM or CISSP) or equivalent
• Significant IT internal audit or technology risk experience within financial services or a similarly regulated organisation
• Proven track record of leading risk-based IT audits end-to-end with concise, evidence-led reports tied to business impact
• Commercial judgement and ability to connect technology risk to strategy, resilience and decision-making
• Working knowledge of FCA and PRA expectations and technology control frameworks, applied proportionately
• Broad technical assurance experience across ITGC, cyber, cloud, IAM, data, resilience, software delivery, change and third‑party services
• Experience leading, coaching and developing auditors with a focus on quality and continuous improvement
• Confident in influencing senior leaders and technical specialists with a pragmatic, solutions-focused approach

• Influencing and stakeholder management
• Collaboration and teamwork
• Strong communication and report-writing
• IT general controls
• Cyber security
• Cloud

…