initiatives as they relate to Sarbanes-Oxley (SOX) regulations. In this pivotal role, you will partner across multiple teams to ensure the design, implementation, and ongoing effectiveness of internal controls over financial reporting (ICFR) in IT systems and processes. You will be a subject matter expert guiding the organization on SOX compliance and lead strategic projects to mitigate … scoping. Control Design & Evaluation:Review, design, and enhance IT general controls (ITGCs), application controls, and automated business process controls. Stakeholder Collaboration:Work closely with IT, Finance, InternalAudit, and external auditors to coordinate SOX testing and remediation efforts. Testing & Documentation:Oversee or perform walkthroughs, test the operating effectiveness of controls, and ensure accurate, comprehensive documentation. Remediation & Continuous … you'll Need to Succeed: Bachelor's degree in Information Technology, Computer Science, Accounting, or a related field. Minimum of 5-7 years of experience in IT compliance, IT audit, or related roles, with significant SOX experience. Deep understanding of SOX Section 404 and ITGCs (e.g., access controls, change management, operations). Experience leading audits or SOX compliance programs More ❯
supplier and contractual arrangements meet rigorous compliance, legal, and risk management standards. You will develop and enforce governance frameworks and act as a key liaison with internalaudit, legal, and compliance teams. Responsibilities Lead the development and implementation of contract governance frameworks and processes Monitor compliance with procurement regulations, contract terms, and information governance (e.g., GDPR) Conduct … and risk management Strong knowledge of public sector procurement legislation and governance frameworks (e.g., ISO 27001) Excellent understanding of data protection and compliance regulations Analytical mindset and experience with audit and compliance reporting Effective stakeholder engagement skills at all levels Why join us Career coaching, mentoring and access to upskilling throughout your entire FDM career Assignments with global companies More ❯
supplier and contractual arrangements meet rigorous compliance, legal, and risk management standards. You will develop and enforce governance frameworks and act as a key liaison with internalaudit, legal, and compliance teams. Responsibilities Lead the development and implementation of contract governance frameworks and processes Monitor compliance with procurement regulations, contract terms, and information governance (e.g., GDPR) Conduct … and risk management Strong knowledge of public sector procurement legislation and governance frameworks (e.g., ISO 27001) Excellent understanding of data protection and compliance regulations Analytical mindset and experience with audit and compliance reporting Effective stakeholder engagement skills at all levels Why join us Career coaching, mentoring and access to upskilling throughout your entire FDM career Assignments with global companies More ❯
Coalville, Leicestershire, East Midlands, United Kingdom
Ibstock PLC
hearts and minds at the manufacturing facilities, ensuring ownership and sustainability of the system once hand over is complete. The role will work closely with various departments to maintain, audit, and improve systems, while developing key KPIs to track performance. Key Accountabilities: Lead the creation, development, and supporting implementation of the Reliability System across the group, with the involvement … a detailed implementation plan with clear milestones and deliverables, ensuring a smooth transition from current systems to Ibstock Safe Reliable Production System. Lead joint efforts with internalaudit teams to assess progress, identify areas for improvement, and ensure compliance standards. Establish, track, and report on reliability and maintenance KPIs to measure performance, drive continuous improvement and track More ❯
Swindon, Wiltshire, United Kingdom Hybrid / WFH Options
Zurich 56 Company Ltd
multiple demands for IT risk-based information within Zurich, ensuring all reporting commitments are met. You will work alongside local and regional Group IT functions, Service Providers (through internal and external suppliers), and business functions to ensure that Zurich is proactive in the management of IT Operational Risk and Controls. The role is varied, interesting, and there are … assessment, the annual IT operational resilience assessment and IT supplier risk assessments Maintain and operate IT risk and control frameworks that serve as a basis for regulatory compliance, internal control processes and management of IT risks and controls, influencing continuous improvement activity. Ensure compliance with IT-related policies and regulatory requirements; develop plan to remediate compliance gaps. Maintain … network with other governance colleagues, senior stakeholders and major partners across IT and the wider Zurich business. Provide regional support and co-ordination for external/internalaudit and other assurance processes. Manage the activity of the UK Supplier IT Risk and Controls Consultant and the IT Risk Consultant. What are we looking for? You will ideally More ❯
procedures, testing strategies, templates, and tools, fostering an innovative approach to control testing within your team. Requirements 7-10 years experience in control testing, operational risk, internalaudit, or compliance within financial services or regulated FinTech environments. Expertise in assessing controls related to financial operations, IT systems, AML, and data protection. Ability to perform tests of controls More ❯
the benefits of managing IT Risk to the business are demonstrated. • Facilitating risk workshops to support the identification and assessment of risks and controls • Supporting the InternalAudit process including understanding and articulation amongst IT stakeholders of key IT risks underlying in any resulting actions. • Maintaining risk artefacts (e.g. IT Risk Register, Bow Tie Risk Reporting etc. More ❯
for a Risk & Compliance Analyst who will play a key role in maintaining and enhancing our global risk and compliance framework, ensuring adherence to relevant laws and regulations, internal policies and third party risk standards. You would identify and mitigate risks, develop and implement compliance programs and monitor compliance with existing and newly developed programs. This role directly … applicable rules and regulations, including changes and updates, and recommending appropriate action plans as necessary. Identifying, assessing, and tracking operational, strategic and compliance risks across departments. Collaborating with internal stakeholders to conduct periodic risk reviews, present risk reports and support mitigation planning. Addressing compliance inquiries/issues identified as a result of compliance reviews, internal audits … to include compliance readiness for new laws, regulations (e.g. GDPR and CCPA), frameworks (e.g. COSO and NIST cybersecurity frameworks) and standards (e.g, DORA, PCI standards). Supporting regulatory, internal or external audits or certifications. Provide knowledge and operational input on our Third-Party Risk Management framework, including: Performing third-party vendor risk assessments, evaluating privacy, information security, and More ❯
for a Risk & Compliance Analyst who will play a key role in maintaining and enhancing our global risk and compliance framework, ensuring adherence to relevant laws and regulations, internal policies and third party risk standards. You would identify and mitigate risks, develop and implement compliance programs and monitor compliance with existing and newly developed programs. This role directly … applicable rules and regulations, including changes and updates, and recommending appropriate action plans as necessary. Identifying, assessing, and tracking operational, strategic and compliance risks across departments. Collaborating with internal stakeholders to conduct periodic risk reviews, present risk reports and support mitigation planning. Addressing compliance inquiries/issues identified as a result of compliance reviews, internal audits … to include compliance readiness for new laws, regulations (e.g. GDPR and CCPA), frameworks (e.g. COSO and NIST cybersecurity frameworks) and standards (e.g, DORA, PCI standards). Supporting regulatory, internal or external audits or certifications. Provide knowledge and operational input on our Third-Party Risk Management framework, including: Performing third-party vendor risk assessments, evaluating privacy, information security, and More ❯
team with AI system risk classification as per the EU AI Act by reviewing technical information submitted by AI development teams Serve as a point of contact for internal stakeholders with regards to EU AI Act compliance and 1st line-of-defence AI governance Provide expert guidance on the design and implementation of technical controls to meet regulatory … obligations (e.g. across accuracy, fairness, robustness), leveraging internal partnerships with stakeholder teams (e.g. Tech, AI development and cybersecurity teams) Help design and roll-out training modules and guidance to support the development of AI systems in line with the EU AI Act Take responsibility for the AI registry used to capture the outcomes of the EU AI Act … process, ensuring it is consistently updated with accurate AI system details, risk classifications, and review outcomes Ensure technical documentation, testing results, and system assessments are available to support internal audits, regulatory exams, and external reviews Deliver clear and timely reporting on key metrics, including risk indicators, control effectiveness, and assessment outcomes, to support visibility across the company Stay More ❯
information security policies, procedures, and standards Conduct risk assessments on technology systems, third-party vendors, and new services. Drive, monitor and track remediation efforts related to incidents, assurance internal audits, external audits, and security assessments Strong stakeholder management skills, working closely with business and technical teams to ensure security controls are implemented and effective Assist in preparing for … and emerging risks Support user awareness across induction, annual training and intranet Report on information security risk and performance indicators to relevant committees Support security awareness training and internal compliance communications Job Requirements Previous progressive experience in information security risk management, risk management, or compliance Strong understanding of information security frameworks (e.g., ISO 27001, NIST) Experience with GRC More ❯
integration. Develop and monitor key performance indicators (KPIs) and metrics to assess month end reporting performance and ensure service level agreements (SLAs) are met. Manage relationships with external & internal auditors, tax authorities, and other stakeholders for audits and compliance checks. Provide strategic guidance and recommendations on balance sheet management related matters. Stay informed about industry best practices and More ❯
Internally Auditing Critical Areas of the Firm This role involves auditing key areas within the firm to minimize risks to regulators and external auditors. Audit teams collaborate with the Technology and Engineering divisions to ensure the firm operates safely and efficiently across its global footprint. Opportunities and Roles Applicants will be considered for multiple roles requiring this skill set. … The specific division and function opportunities vary based on business needs. Examples include: InternalAudit : Assess internal controls, advise management, and monitor implementation to ensure reliable financial reporting, compliance, and effective operations. Division-specific roles include: Business Technology Engineering : Focuses on audits related to software engineering, product management, and system design within Global Banking & Markets More ❯
to use and designed to demystify money for everyone. We employ more than 3,000 people across our London, Southampton, Cardiff and Manchester offices. We're looking for an Audit Manager to join our growing internalaudit team covering Financial Risk including Credit, Market, Model risk, Capital & Liquidity areas across Starling. You'll be responsible for … the audit plan in key areas across Finance, Tax & Treasury, Model and Market & Credit risk. You will support the Group Head of InternalAudit (SMF5) and Director of Business Audit, and will be expected to present your work to the Executive team and the Board Audit Committee. You will help Starling's Senior Management … to candidates based in either London or Cardiff. Travel to London office will be required on an occasional basis. Your responsibilities will include: Delivery of the internalaudit plan across Financial Risk areas, with the support of Starling's in-house team and co-source providers Provide insightful and impactful reporting to help the Executive and the More ❯
senior management of Fortune 500, mid-cap and start-up companies, as well as all levels of CFGI staff from Consultant to Partner. Engagements include IT InternalAudit, SOX implementation and testing, attestation/certification readiness work, business process improvement projects, compliance and other assessments. CFGI Directors lead project teams and interact with clients and their external … assessments, testing approach and specific procedures; identifying areas for improvement and value-add; preparing reports or other appropriately styled presentations of findings and recommendations; preparation for, and participation in Audit Committee meetings or other senior management meetings; developing and managing relationships with client management; managing engagement economics; and business development with new and existing clients. Furthermore, Directors are seen … projects, and the continual improvement of the Risk Advisory team. Ideal candidates will possess the following: Certified CISA, CIA or other standard auditing certification combined with solid IT audit experience. 10+ years of experience in public accounting and/or industry performing IT audit, systems implementations, or Information Security; Excellent interpersonal, written and oral communication skills, and More ❯
the company, responsible for owning, operating, and evolving our Quality Management System (QMS) and Information Security Management System (ISMS). You will work cross-functionally across all departments, lead audit readiness, drive continuous improvement, and serve as the company’s Information Security Officer and Management Representative. This role is ideal for someone who thrives in a high-impact, autonomous … device regulations. · Act as the company’s Information Security Officer, driving a proactive security culture and maintaining regulatory readiness. · Lead and coordinate all internal, external, and customer audit activities, including those with Notified and Certification Bodies. · Plan and estimate QA and ISMS activities and represent QA in company-level planning, resourcing, and budgeting decisions. · Provide quality oversight … Control, CAPA, Supplier Evaluation and Monitoring, Management Review and Training. · Support and guide process owners in regulatory interpretation, risk-based decision making, and change implementation. · Lead and coordinate internal audits to ensure ongoing QMS and ISMS compliance. · Coordinate and host external audits from Notified Bodies, certification bodies, customers, or partners. · Act as Mirada’s Management Representative (MR). More ❯
the company, responsible for owning, operating, and evolving our Quality Management System (QMS) and Information Security Management System (ISMS). You will work cross-functionally across all departments, lead audit readiness, drive continuous improvement, and serve as the company’s Information Security Officer and Management Representative. This role is ideal for someone who thrives in a high-impact, autonomous … device regulations. · Act as the company’s Information Security Officer, driving a proactive security culture and maintaining regulatory readiness. · Lead and coordinate all internal, external, and customer audit activities, including those with Notified and Certification Bodies. · Plan and estimate QA and ISMS activities and represent QA in company-level planning, resourcing, and budgeting decisions. · Provide quality oversight … Control, CAPA, Supplier Evaluation and Monitoring, Management Review and Training. · Support and guide process owners in regulatory interpretation, risk-based decision making, and change implementation. · Lead and coordinate internal audits to ensure ongoing QMS and ISMS compliance. · Coordinate and host external audits from Notified Bodies, certification bodies, customers, or partners. · Act as Mirada’s Management Representative (MR). More ❯
IT Auditor - Insurance Within this leading International Insurance group, you will be working closely with your US Audit counterparts and taking the lead on the UK/European IT audit portfolio. You will be able to demonstrate competency across the following activities: To plan, manage, execute and lead value added IT internal audits Perform IT SOX …/internal control framework testing, including walkthroughs and flowcharting on an annual basis across the in scope European branch network. Perform IT controls and process testing across all departments and areas including but not limited to, underwriting, claims, reinsurance, finance, human resources, IT, risk management, Solvency II, governance, compliance and actuarial. Example responsibilities will include: To plan, manage … Systems (CISA) designation preferred but not essential. A number of years of relevant and progressive professional experience with a minimum of three years of relevant IT internalaudit experience. Insurance or financial services experience preferred. Hybrid working patterns available More ❯
be 10-20% travel with the role. The team works on a hybrid basis with 2 days a week in central London office. Supported by the Head of IT Audit, you will responsible for full end to end delivery of the internalaudit plan. You will collaborate with other members of the internal and … IT internalaudit team as you engage and build influence with the Senior Stakeholders across the business. You will be keen to build on your already established IT audit expertise and also expand your financial services knowledge. IT Audit experience gained from banking or wider financial services industries is considered advantageous but we are also … Alto and Cisco ASA) Websphere MQ, IIB and Application Server Virtualisation Strong communication and influencing skills are essential as you join this leading bank and the Head of IT Audit will support you as you develop these further by attending committee and management meetings across the business. CISA qualification is essential, or a willingness to study towards. My client More ❯
is a rare opportunity to join a mission-driven organisation with a global impact in science, health, and research. This is a key position within the InternalAudit team, where you’ll be central to the delivery of the annual technology audit plan, providing independent assurance over IT risks, controls, and strategic projects. Your work will … Assess major IT systems and platforms – including cloud services, security frameworks, and data infrastructure Build relationships with stakeholders across the business, offering guidance and constructive challenge Contribute to non-audit responsibilities such as committee reporting, audit planning, and the evolution of audit methodologies Skills & Experience: Experience delivering IT audits, either in-house or from a consultancy background … with the ability to influence and advise at a senior level Professional qualification such as CISA, CRISC, CISM or CISSP highly desirable If you're looking to combine your audit expertise with meaningful purpose, this role offers a chance to make a real difference in a globally respected organisation. More ❯
is a rare opportunity to join a mission-driven organisation with a global impact in science, health, and research. This is a key position within the InternalAudit team, where you’ll be central to the delivery of the annual technology audit plan, providing independent assurance over IT risks, controls, and strategic projects. Your work will … Assess major IT systems and platforms – including cloud services, security frameworks, and data infrastructure Build relationships with stakeholders across the business, offering guidance and constructive challenge Contribute to non-audit responsibilities such as committee reporting, audit planning, and the evolution of audit methodologies Skills & Experience: Experience delivering IT audits, either in-house or from a consultancy background … with the ability to influence and advise at a senior level Professional qualification such as CISA, CRISC, CISM or CISSP highly desirable If you're looking to combine your audit expertise with meaningful purpose, this role offers a chance to make a real difference in a globally respected organisation. More ❯
be 10-20% travel with the role. The team works on a hybrid basis with 2 days a week in central London office. Supported by the Head of IT Audit, you will responsible for full end to end delivery of the internalaudit plan. You will collaborate with other members of the internal and … IT internalaudit team as you engage and build influence with the Senior Stakeholders across the business. You will be keen to build on your already established IT audit expertise and also expand your financial services knowledge. IT Audit experience gained from banking or wider financial services industries is considered advantageous but we are also … Alto and Cisco ASA) Websphere MQ, IIB and Application Server Virtualisation Strong communication and influencing skills are essential as you join this leading bank and the Head of IT Audit will support you as you develop these further by attending committee and management meetings across the business. CISA qualification is essential, or a willingness to study towards. My client More ❯
and perform vulnerability management, remediation, and ensure the development of secure and compliant IT and business solutions, secure design, deployment and operation of cloud infrastructure/services and Internal IT security consultancy. You'll be responsible for: Responding to and/or escalating security alerts generated by the IT security toolset; Identification and remediation of IT security risks … IT Operations Team to assess security infrastructure, network and systems; Identify security risks, threats and vulnerabilities of networks, systems, applications and new technology initiatives; Perform and evaluate regular internal and external vulnerability scans; React to and initiate corrective action regarding security violations, attempts to gain unauthorized access, virus infections that may affect the network or other events affecting … Supplier Oversight activities by performing Technical Security related Risk Assessments as and when required; Provide expert technical security services as and when required for Client requirements, internalaudit, external audit and any prevailing Certification activities. You'll need to evidence the following qualifications, skills and experience: Excellent understanding of technical security processes, security operations, hardening techniques More ❯
GCS services and promoting local control adoption. Lead colleague security culture programs. Represent the region/sub-region in security incident management. Manage remediation efforts, e.g., internalaudit findings. Oversee cybersecurity compliance and conduct management. Cybersecurity Risk Management: Manage a cybersecurity risk committee to support cyber risk management. Track remediation of audit and compliance findings. Review More ❯
jurisdictions, including SOX controls, GDPR, and local withholding/taxation rules Own the preparation and oversight of external payroll audits and financial audits and coordinate with internalaudit and external auditors Process Optimization & Technology Identify and implement process improvements, automation opportunities, and best practices in payroll systems and reporting Collaborate with IT and Finance on system upgrades … insights, and compliance updates Build, mentor, and lead a high-performing, geographically dispersed payroll team Foster a culture of accountability and continuous improvement Promote cross-functional collaboration with internal stakeholders (HR, Finance, Legal, etc.) to achieve payroll objectives and enhance overall efficiency Demonstrate leadership through a 'one-team' mentality and a growth mindset Skills/Qualifications: Bachelor's … global regions (North America, EMEA, LATAM, and APAC) Demonstrated success in leading large-scale payroll transformations Experience in a publicly traded environment with strong understanding of SOX and internal controls Exceptional leadership, communication, and stakeholder management skills Proficiency in global HCM and ERP platforms (e.g., Workday, Dayforce) Requires sitting or standing at will while performing work on a More ❯