a leading financial institution committed to excellence in compliance, risk management, and technological advancement. We are currently seeking an experienced IT Banking Auditor to join our InternalAudit team in Birmingham. This is a critical role, offering the opportunity to evaluate and improve the organisation's IT systems and controls in line with regulatory and operational standards. … best practices, and regulatory requirements (e.g., FCA, PRA, GDPR, ISO 27001, PCI-DSS). Collaborate with business and IT stakeholders to understand operational processes and system architecture. Prepare detailed audit reports and present findings to senior management. Support external auditors and regulatory examinations where necessary. Stay current on emerging technologies, threats, and audit techniques. Requirements: Essential: Bachelor's … equivalent. Minimum of 3-5 years of experience in IT auditing within the financial services or banking sector. Strong understanding of IT general controls, application controls, and risk-based audit methodology. Familiarity with banking regulations and standards (e.g., Basel III, SOX, PSD2). Excellent communication and reporting skills, with the ability to explain technical issues to non-technical stakeholders. More ❯
Vice President, Senior IT Audit Manager Vice President, Senior IT Audit Manager Apply locations London time type Full time posted on Posted 2 Days Ago job requisition id -WD Do you want your voice heard and your actions to count? Discover your opportunity with Mitsubishi UFJ Financial Group (MUFG), one of the world's leading financial groups. Across … our common values, to behave with integrity and responsibility, and to build a culture which is fair, transparent, and honest, underpin everything that we do. EMEA InternalAudit Office (EIAO), as the Bank's third Line of Defence, and in accordance with the Global Institute of Internal Auditors (IIA) International Standards (IIA Standards), provides independent … and mitigate key risks to achieving the Bank's objectives. NUMBER OF DIRECT REPORTS TBC MAIN PURPOSE OF THE ROLE An exciting new opportunity has emerged for a Senior Audit Manager to join our IT audit team within the EMEA InternalAudit function. Senior Audit Managers are responsible for executing and delivering all auditMore ❯
Southampton, Hampshire, United Kingdom Hybrid / WFH Options
NICE
Information Security Analyst - Audit, Compliance & Cybersecurity United Kingdom - Southampton At NICE, we don't limit our challenges. We challenge our limits. Always. We're ambitious. We're game changers. And we play to win. We set the highest standards and execute beyond them. And if you're like us, we can offer you the ultimate career opportunity that will … compliance, and readiness for external audits while also contributing to Cybersecurity Operations Center (CSOC) activities, including incident monitoring and response. How will you make an impact? InternalAudit Execution: Conduct internal audits to evaluate and enhance IT controls, compliance with standards, and risk management processes. Audit Preparation: Assist internal control owners in … scoping appropriate evidence and preparing for external audits. Gap Assessments: Facilitate and/or conduct internal gap assessments and audit readiness evaluations for frameworks such as ISO 27001, GDPR, and DORA. Framework Tracking: Monitor updates to Cyber Essentials, ISO, and regulatory frameworks and ensure internal alignment. Control Documentation: Develop and maintain control narratives, walkthroughs, and More ❯
and provide direction and input for the maturation of the Cloud Security Framework in respect to data classification. Enhance security programs in response to regulatory requirements, internalaudit and planned strategic initiatives. Foster relationships with key functional teams such as IT, Compliance, Operations, Finance, HR, InternalAudit, and Enterprise Risk to support current and … develop remediation plans and determine residual risk. Improve security metrics program to report key performance and risk indicators, trend statistical data and publish management reports for InternalAudit, Regulatory Exams, Risk Committee and Board reporting. Perform risk assessments of third-party vendors according to vendor criticality and vendor type to identify control gaps, develop remediation plans and … to effectively communicate complex technical issues to both business and technical staff at all levels. Strong collaboration skills to tackle complex security challenges that may span across multiple internal and external departments and groups. Able to effectively cope with change and comfortably handle risk and ambiguity, not upset when things are up in the air. Tenacious resolve and More ❯
remedial action is taken and trends are monitored. Prepare and deliver training, education, and awareness sessions related to information security, assurance, and risk management. Work collaboratively with key internal and external stakeholders-including third-party suppliers-ensuring best practices and compliance with relevant legislation and standards. Stay informed on developments in legislation, practices, and tools related to information … security and data protection, fostering continuous improvement and innovation. Represent the organisation in internal and external meetings, promoting information security standards and contributing to relevant partnerships and working groups. Perform other duties as appropriate to the nature and level of the role. Regular travel across operational areas may be required. PERSON SPECIFICATION Knowledge: A Levels or equivalent. Recognised … Experience: Operational delivery of security assurance in a multi-site environment. Managing compliance with standards like PSN or SyAP. Developing and enforcing information security and assurance policies. Performing internal audits and managing accreditation processes. Facilitating high-level stakeholder engagement. Collaborating with external agencies and partners on security issues. Key Skills: Ability to manage workloads, meet deadlines, and adapt More ❯
remedial action is taken and trends are monitored. Prepare and deliver training, education, and awareness sessions related to information security, assurance, and risk management. Work collaboratively with key internal and external stakeholders-including third-party suppliers-ensuring best practices and compliance with relevant legislation and standards. Stay informed on developments in legislation, practices, and tools related to information … security and data protection, fostering continuous improvement and innovation. Represent the organisation in internal and external meetings, promoting information security standards and contributing to relevant partnerships and working groups. Perform other duties as appropriate to the nature and level of the role. Regular travel across operational areas may be required. PERSON SPECIFICATION Knowledge: A Levels or equivalent. Recognised … Experience: Operational delivery of security assurance in a multi-site environment. Managing compliance with standards like PSN or SyAP. Developing and enforcing information security and assurance policies. Performing internal audits and managing accreditation processes. Facilitating high-level stakeholder engagement. Collaborating with external agencies and partners on security issues. Key Skills: Ability to manage workloads, meet deadlines, and adapt More ❯
York, Yorkshire, United Kingdom Hybrid / WFH Options
Hiscox
The Group InternalAudit team provides independent and objective assurance and advice to the Group Audit Committee, and to the Boards of Directors of the companies within the Group, over the processes and systems of control and risk management operating in the Group. IA's scope covers all aspects of the Group and its activities and … liaises closely with other monitoring functions across the Group, including Group Compliance and Group Risk. The Group Audit team is based in London, York, Luxembourg, Lisbon and the US. The team is supplemented with additional co-source when required. What you'll be doing As a part of a small but dynamic team, you will conduct mostly Technology and … business; working with and supporting other team members; contributing to IT Audits planning and strategy, and to its continued development; and helping to build and maintain InternalAudit's presence and reputation across the Group. Outside the plan, you may be asked to conduct specific reviews or to take on special projects. You will also be expected More ❯
information security controls into our technology stack. This is a full-time position. Occasional after-hours work may be required to support incident response, high-priority vulnerability fixes, or audit activities. Develop and implement data protection governance: Design, implement, and enforce data protection and information security policies and procedures aligned with business objectives and regulatory requirements Support the development … of strategies to mitigate and monitor data protection risks and incidents Coordinate internal audits, assessments, and recommend improvements to enhance data protection posture Work collaboratively with the wider Information Security team to identify and develop a strategy to mitigate, manage, and monitor data protection risks and incidents Work collaboratively with other departments to ensure the alignment of security … mitigation, containment, and recovery processes Legal and regulatory conformance: Ensure conformance with relevant regulations (CCPA, GDPR, etc.) Manage ITG group data protection process, including all relevant external audits, internal assessments, and planning Ensure the accurate review of system configurations takes place to ensure alignment with data protection and information security best practices Ensure the documenting of configuration settings More ❯
Newcastle upon Tyne, United Kingdom Hybrid / WFH Options
NHS Business Services Authority
ll lead a team of specialists, manage security operations, and support various projects and initiatives. Your role involves ensuring compliance with security standards, managing incidents, and collaborating with internal and external stakeholders. Key Responsibilities : Lead and manage the Cyber Security Operations team. Ensure compliance with security standards (ISO27001, NCSC CAF). Manage security incidents and vulnerabilities. Collaborate with … third-party suppliers and internal teams. Provide expert advice on security technologies and processes. Requirements : Proven team leadership experience.Strong knowledge of security technologies (firewalls, IDS/IPS, SIEM).Relevant qualifications (CISSP, CISM, etc.). Apply now to make a significant impact on NHS BSA's cyber security strategy! What do we offer ?o 27 days leave (increasing with … efficient resolution. Conduct forensically sound acquisitions of computer systems and media for evidence collection. Provide advice and guidance in penetration testing and improving service offerings. Carry out reviews, internal audits, and spot-checks to ensure effective operation of security measures. Provide expertise in the design and implementation of specialist security technologies and cloud systems. About us Here at More ❯
an integral part of our Technology Risk team, part of Assurance Advisory within EY UK. The opportunity We are a market leader across the Big-4 with significant new audit engagements across financial services clients and substantial projected revenue growth in the coming years. Our ongoing advancements in innovation and automation continue to place us ahead of our competitors. … will be an influential member of our Technology Risk team, and you will have the opportunity to work on a range of IT Assurance projects. There include IT External Audit Support (known in EY as FAIT or Financial Audit IT), IT InternalAudit, IT components of Regulatory Reviews and other assurance activities (e.g. client money … affecting the financial audit. Getting involved with industry research and client thought leadership. To qualify for the role you must have Demonstrable professional IT External or InternalAudit experience. Experience in delivering high quality integrated audits across IT/operations/finance including IT general controls (ITGC), IT automated controls audit. Knowledge of payments, front-to-back More ❯
the company is redefining its industry and setting new standards for the future. Operating in a dynamic and complex global environment, it is now focused on elevating its internal controls function—leveraging innovation, data, and automation to strengthen governance and enable smarter, faster decision-making across the enterprise. As part of this transformation, the business is seeking a … recommend improvements. Applying automation and analytics to test controls, perform root cause analyses, and support SOx assurance activities. Collaborating with cross-functional stakeholders—including Data & Analytics, IT, Finance, and Audit—to drive a culture of risk awareness and control excellence. Translating technical risks and data findings into clear, actionable business narratives for senior leaders and stakeholders. Partnering with external … tools. The Ideal Candidate A qualified professional (ACA, ACCA, CISA or equivalent), ideally with certifications in data analytics or automation. Significant post-qualification experience, ideally within internalaudit, business controls, or risk & assurance—preferably in a Big 4, global FMCG, or complex matrix organisation. Proven experience using data analytics and automation tools to enhance internalMore ❯
the company is redefining its industry and setting new standards for the future. Operating in a dynamic and complex global environment, it is now focused on elevating its internal controls function—leveraging innovation, data, and automation to strengthen governance and enable smarter, faster decision-making across the enterprise. As part of this transformation, the business is seeking a … recommend improvements. Applying automation and analytics to test controls, perform root cause analyses, and support SOx assurance activities. Collaborating with cross-functional stakeholders—including Data & Analytics, IT, Finance, and Audit—to drive a culture of risk awareness and control excellence. Translating technical risks and data findings into clear, actionable business narratives for senior leaders and stakeholders. Partnering with external … tools. The Ideal Candidate A qualified professional (ACA, ACCA, CISA or equivalent), ideally with certifications in data analytics or automation. Significant post-qualification experience, ideally within internalaudit, business controls, or risk & assurance—preferably in a Big 4, global FMCG, or complex matrix organisation. Proven experience using data analytics and automation tools to enhance internalMore ❯
methods and practices around assurance and risk, shaping activities, processes and systems. In this role you will work across team and department boundaries, engaging with IT, InternalAudit and Information Security to ensure that controls are built and implemented, monitored and tested, and that these are auditable and documented within the process models. This role will be … quality standards, procedures and systems ensuring effective working and continuous improvement Act as a first point of contact for any internal assurance stakeholders (e.g., InternalAudit team) for their enquiries relating to assurance, audit and risk issues Provide professional guidance to stakeholders on audit, assurance, risk and control Work closely with key IT … governance and compliance within best practice frameworks In-depth knowledge of ISO27001 controls and requirements Strong knowledge of IT processes and working within an IT team Understanding of the audit process, having worked with Audit (internal & external) in the past Working knowledge of risk and compliance assurance and monitoring practices, and a good understanding of risk More ❯
and prioritize security risks based on enterprise-wide impact, likelihood, and mitigation strategies. Act as a trusted security advisor, working cross-functionally with IT, legal, compliance, InternalAudit, AI Centre of Excellence and other business leadership teams to drive a culture of risk awareness. Ensure that all security risks align with regulatory requirements such as ISO … A&M GRC platform (OnSpring) to provide a structured, scalable risk register and reporting capabilities to support A&M wide requirements, and support ISO 27001:2022 certification requirements. Risk Audit Requirements: Complete annual formal risk assessment including control maturity assessment and asset register revision. Work closely with InternalAudit to ensure audit compliance and delivery … for ISO 27001. Support ownership of minor non-conformities log of internal and external audit findings through to reporting, remediation and closure. Attend ISO 27001 external audits for InfoSec Risk Management related compliance requirements. Risk Governance: Organize and facilitate bi-weekly Global Security Office Risk Management meetings, providing comprehensive tracking and updates on risk triage activities, critical More ❯
methods and practices around assurance and risk, shaping activities, processes and systems. In this role you will work across team and department boundaries, engaging with IT, InternalAudit and Information Security to ensure that controls are built and implemented, monitored and tested, and that these are auditable and documented within the process models. This role will be … quality standards, procedures and systems ensuring effective working and continuous improvement Act as a first point of contact for any internal assurance stakeholders (e.g., InternalAudit team) for their enquiries relating to assurance, audit and risk issues Provide professional guidance to stakeholders on audit, assurance, risk and control Work closely with key IT … governance and compliance within best practice frameworks In-depth knowledge of ISO27001 controls and requirements Strong knowledge of IT processes and working within an IT team Understanding of the audit process, having worked with Audit (internal & external) in the past Working knowledge of risk and compliance assurance and monitoring practices, and a good understanding of risk More ❯
As one of the world's largest networks of audit, tax and consulting firms, RSM delivers big ideas and premium service to help middle-market businesses thrive. We are a fast-growing firm with big ambitions we have a clear goal to become the premium adviser to the middle market, globally. This vision touches everything we do, motivating and … central government). Our team thrives as their responsibilities are diverse, challenging, and purposeful. We regularly work alongside other RSM teams (UK and International) including, Tax, InternalAudit, Corporate Finance, Consulting, and External Audit to help our clients address their most complex business challenges. Overall job purpose No career pathway in your current role? You won … an interest in your team. Shaping our future by leading innovation streams that build future products, services, and solutions. Representing RSM in external meetings, including attendance at client workshops, audit committees, and regional networking events. Leading our efforts on local Corporate Social Responsible (CSR) initiatives. Building trusted relationships with senior client stakeholders, and identifying opportunities where we could assist More ❯
Chorley, England, United Kingdom Hybrid / WFH Options
TVS Supply Chain Solutions UK & Europe
management and be able to communicate effectively at all levels. Main Duties & Responsibilities: Support the maintenance, development and continual improvement of ISBC Management System Coordinate and assist in internal audits to maintain ISO 27001 and ISO 22301 compliance Track and follow up on corrective and preventive actions resulting from audits or incidents Maintain documentation, records, and registers in … with compliance obligations Knowledge, Skills, Experience and Qualifications: Understanding of ISO 27001 and ISO 22301 frameworks, including risk management Strong organisational and documentation skills Experience with internalaudit, compliance review, or policy implementation Effective written and verbal communication skills, especially for reporting, training and stakeholder coordination Analytical and problem-solving skills to assist with incident response, risk … management, corrective actions and continual improvements Relevant experience in compliance, information security, risk, or operational support roles ISO Internal Auditor training certification a benefit Ability to communicate well at all levels up to and including board level Happy with occasional UK travel and hold a full UK driving licence In return for your hard work, we offer excellent More ❯
Swindon, Wiltshire, United Kingdom Hybrid / WFH Options
Zurich 56 Company Ltd
multiple demands for IT risk-based information within Zurich, ensuring all reporting commitments are met. You will work alongside local and regional Group IT functions, Service Providers (through internal and external suppliers), and business functions to ensure that Zurich is proactive in the management of IT Operational Risk and Controls. The role is varied, interesting, and there are … assessment, the annual IT operational resilience assessment and IT supplier risk assessments Maintain and operate IT risk and control frameworks that serve as a basis for regulatory compliance, internal control processes and management of IT risks and controls, influencing continuous improvement activity. Ensure compliance with IT-related policies and regulatory requirements; develop plan to remediate compliance gaps. Maintain … network with other governance colleagues, senior stakeholders and major partners across IT and the wider Zurich business. Provide regional support and co-ordination for external/internalaudit and other assurance processes. Manage the activity of the UK Supplier IT Risk and Controls Consultant and the IT Risk Consultant. What are we looking for? You will ideally More ❯
the benefits of managing IT Risk to the business are demonstrated. • Facilitating risk workshops to support the identification and assessment of risks and controls • Supporting the InternalAudit process including understanding and articulation amongst IT stakeholders of key IT risks underlying in any resulting actions. • Maintaining risk artefacts (e.g. IT Risk Register, Bow Tie Risk Reporting etc. More ❯
Security professionals within the GTRM function. Who are my customers? A variety of business stakeholders will be the primary customers, notably project sponsors, project stakeholders and technology teams (internal and external) where security controls need to be addressed. Additionally, there will be key functional relationships with teams such as Legal, Finance and Marketing. Global Technology customers will include … Global Cyber Security, Global Technology Infrastructure & Operations and Internal Audit. Qualifications: What background do I need to have? A successful candidate will have a bachelor's degree or equivalent/higher in computer science, cyber security, information security or similar, or a professional certification such as SSCP. Verification of certification will be requested during the recruitment process. Additionally More ❯
InternalAudit Manager - Market/Counterparty Credit Risk - London - Global Markets AVP Market Risk InternalAudit Manager Join our InternalAudit Traded Risk team as an AVP. You'll be a key member of the global internalaudit team, focusing on the delivery of audits and the validation … and/or postgraduate education in Accounting, Finance, Risk Management, or a related field Relevant professional certifications such as CPA, CIA, FRM, or CFA, or equivalent career experience in audit or risk management roles Proficiency in data analytics and coding, with experience in tools like Tableau, Python, SQL, and other data science techniques Excellent communication, analytical, and interpersonal skills … support the development of audits aligned to the bank's standards and objectives by working collaboratively with colleagues, providing accurate information and recommendations, and complying with policies and procedures.Accountabilities Audit development and delivery support, including financial statements, accounting practices, operational processes, IT systems and risk management. Identification of operational risks to support the delivery of the Audit Plan More ❯
to take the next step in your career within a large, forward-thinking financial services group? We're working with a leading insurer seeking an IT InternalAudit Specialist to join its global audit team spanning the UK, Europe, and North America. This is a fantastic opportunity to join a high-performing audit function that … is central to the business's transformation and growth in commercial lines. Key Responsibilities: Plan and deliver IT audits covering Cybersecurity, Infrastructure, Cloud, and Network Operations Lead audit engagements, from scoping through to reporting Present clear, concise findings and drive stakeholder engagement Track and follow up on audit recommendations Collaborate closely with global audit colleagues across regions … What You'll Need: 3-5 years of IT internalaudit experience, ideally in financial services Strong communication skills and stakeholder management experience A recognised audit or security qualification (e.g. CISA, CIA, CISSP, CISM) A genuine interest in emerging technologies - exposure to AI or GenAI is a plus Why Apply? You'll be part of a More ❯
to use and designed to demystify money for everyone. We employ more than 3,000 people across our London, Southampton, Cardiff and Manchester offices. We're looking for an Audit Manager to join our growing internalaudit team covering Financial Risk including Credit, Market, Model risk, Capital & Liquidity areas across Starling. You'll be responsible for … the audit plan in key areas across Finance, Tax & Treasury, Model and Market & Credit risk. You will support the Group Head of InternalAudit (SMF5) and Director of Business Audit, and will be expected to present your work to the Executive team and the Board Audit Committee. You will help Starling's Senior Management … to candidates based in either London or Cardiff. Travel to London office will be required on an occasional basis. Your responsibilities will include: Delivery of the internalaudit plan across Financial Risk areas, with the support of Starling's in-house team and co-source providers Provide insightful and impactful reporting to help the Executive and the More ❯
with other CFGI professionals, its clients and their external auditors (or other professional service firms) on a variety of facets of the engagements, such as IT InternalAudit, SOX implementation and testing, attestation/certification readiness work, business process improvement projects, compliance and other assessments. Duties include: Performing IT controls testing, creating process narratives, flow charts or … with client contacts Assisting with managing engagement economics Furthermore, all team members, from the Consultant level and up, build their skills by assisting the Firm's leadership with internal responsibilities for training, internal projects, and the continual improvement of the Risk Advisory team. Ideal candidates will possess the following: Strong progress towards obtaining official certification for … CIA or other standard auditing certification will be considered in lieu of university degree Three to Five years of experience in public accounting and/or industry performing IT audit, systems implementations, or Information Security Excellent interpersonal, written and oral communication skills, and ability to assimilate easily into teams Strong technical skills and a working knowledge of SOX IT More ❯
brilliant people. People who love building great products, redefining success, and turning the complexity of a chaotic world into the simplicity of a beautiful solution. About the role Our Audit team is crucial to our business. They work closely with Risk and Compliance to create internal risk management and compliance processes, and to make sure they're … customers. Up to shape the future of finance? Let's get in touch. What you'll be doing Working closely with the UK Bank Head of InternalAudit (SMF5) to develop and execute audit programmes under internal policies, regulatory requirements, and the Standards for the Professional Practice of Internal Auditing. Proactively seeking … our understanding of risks, test controls, and provide relevant insights. Providing input and assisting in the identification of relevant risks and regulatory requirements for incorporation as part of our audit scope and work programmes. Interacting with staff to obtain an understanding of relevant risks, controls, and processes. Assisting in communicating and discussing findings with business unit management. Developing auditMore ❯