York, Yorkshire, United Kingdom Hybrid / WFH Options
Hiscox
The Group InternalAudit team provides independent and objective assurance and advice to the Group Audit Committee, and to the Boards of Directors of the companies within the Group, over the processes and systems of control and risk management operating in the Group. IA's scope covers all aspects of the Group and its activities and … liaises closely with other monitoring functions across the Group, including Group Compliance and Group Risk. The Group Audit team is based in London, York, Luxembourg, Lisbon and the US. The team is supplemented with additional co-source when required. What you'll be doing As a part of a small but dynamic team, you will conduct mostly Technology and … business; working with and supporting other team members; contributing to IT Audits planning and strategy, and to its continued development; and helping to build and maintain InternalAudit's presence and reputation across the Group. Outside the plan, you may be asked to conduct specific reviews or to take on special projects. You will also be expected More ❯
Newcastle upon Tyne, United Kingdom Hybrid / WFH Options
NHS Business Services Authority
ll lead a team of specialists, manage security operations, and support various projects and initiatives. Your role involves ensuring compliance with security standards, managing incidents, and collaborating with internal and external stakeholders. Key Responsibilities : Lead and manage the Cyber Security Operations team. Ensure compliance with security standards (ISO27001, NCSC CAF). Manage security incidents and vulnerabilities. Collaborate with … third-party suppliers and internal teams. Provide expert advice on security technologies and processes. Requirements : Proven team leadership experience.Strong knowledge of security technologies (firewalls, IDS/IPS, SIEM).Relevant qualifications (CISSP, CISM, etc.). Apply now to make a significant impact on NHS BSA's cyber security strategy! What do we offer ?o 27 days leave (increasing with … efficient resolution. Conduct forensically sound acquisitions of computer systems and media for evidence collection. Provide advice and guidance in penetration testing and improving service offerings. Carry out reviews, internal audits, and spot-checks to ensure effective operation of security measures. Provide expertise in the design and implementation of specialist security technologies and cloud systems. About us Here at More ❯
Chorley, England, United Kingdom Hybrid / WFH Options
TVS Supply Chain Solutions UK & Europe
management and be able to communicate effectively at all levels. Main Duties & Responsibilities: Support the maintenance, development and continual improvement of ISBC Management System Coordinate and assist in internal audits to maintain ISO 27001 and ISO 22301 compliance Track and follow up on corrective and preventive actions resulting from audits or incidents Maintain documentation, records, and registers in … with compliance obligations Knowledge, Skills, Experience and Qualifications: Understanding of ISO 27001 and ISO 22301 frameworks, including risk management Strong organisational and documentation skills Experience with internalaudit, compliance review, or policy implementation Effective written and verbal communication skills, especially for reporting, training and stakeholder coordination Analytical and problem-solving skills to assist with incident response, risk … management, corrective actions and continual improvements Relevant experience in compliance, information security, risk, or operational support roles ISO Internal Auditor training certification a benefit Ability to communicate well at all levels up to and including board level Happy with occasional UK travel and hold a full UK driving licence In return for your hard work, we offer excellent More ❯
in NIST to drive our Compliance Team's service offerings forward. Work with a innovative, industry-leading Cyber Security team Play a key role in the development of internal and client security programs Contribute to significant projects that support clients' compliance and risk management goals If you're ready to make an impact in Cyber Security, this role … is for you! Responsibilities: Ensure protection of information assets and technologies Participate in security audits like ISO27001, ISO27701, ISO20000, NIST-CSF, and IASME Governance Conduct and document internal audits for our clients Deliver security awareness training, including public speaking engagements Manage Third-Party Risk Management (TPRM) including vendor security reviews Assist the Sales Team with scoping engagements and … ISMS) certified to ISO27001 standards Knowledge of the Cyber Essentials Plus Scheme, GDPR, and Data Protection Act (2018) Strong communication skills and the ability to build relationships with internal and external stakeholders Hands-on experience in ISO27001 implementation and auditing Eligibility for Security Clearance Certifications Preferred: ISO/IEC 27001 Lead Implementer ISO/IEC 27001 InternalMore ❯
and perform vulnerability management, remediation, and ensure the development of secure and compliant IT and business solutions, secure design, deployment and operation of cloud infrastructure/services and Internal IT security consultancy. You'll be responsible for: Responding to and/or escalating security alerts generated by the IT security toolset; Identification and remediation of IT security risks … IT Operations Team to assess security infrastructure, network and systems; Identify security risks, threats and vulnerabilities of networks, systems, applications and new technology initiatives; Perform and evaluate regular internal and external vulnerability scans; React to and initiate corrective action regarding security violations, attempts to gain unauthorized access, virus infections that may affect the network or other events affecting … Supplier Oversight activities by performing Technical Security related Risk Assessments as and when required; Provide expert technical security services as and when required for Client requirements, internalaudit, external audit and any prevailing Certification activities. You'll need to evidence the following qualifications, skills and experience: Excellent understanding of technical security processes, security operations, hardening techniques More ❯
FFIEC, ISO 27001, NIST, GDPR, etc.). -Familiarity with IT governance frameworks such as COBIT, ITIL, and risk frameworks like COSO or ISO 31000. -Experience conducting or supporting internal audits, control testing, or compliance reviews. -Excellent communication and stakeholder engagement skills across technical and business teams. -Ability to interpret complex IT and business processes and translate them into More ❯
and enhance processes, policies, standards. This is a great time to join us at a period of significant growth, change and opportunity. If you have experience working in IT audit and have a passion for Risk and Control management, then we would love to hear from you! What you’ll be doing: Perform IT Control implementation in line with … centralise and automate controls and processes to drive efficiency using existing tools and technologies. Support the Head of IT Risk and Control in collation and delivery of information for Audit, Risk and Board meetings. Liaise with internal/external audit where required and align closely with our business colleagues. Keep awareness of project pipeline activities and … to degree level with CISA, CRISC or similar professional qualifications/QBE Desirable: Project Management qualifications 4 years minimum experience of working with or within IT internalaudit/external audit teams within a big 4 or similar corporate environment. Confident in designing and documenting new and/or existing IT General Controls from across access More ❯
Systems and maximise funding accuracy and compliance across the organisations training provision. In this stand alone role, Youll be responsible for maintaining data quality, managing funding submissions, and ensuring audit readiness. A strong knowledge of apprenticeship and 1619 funding is essential, along with the ability to support internal teams and drive efficiencies. ________________________________________ Key Responsibilities Management Information Systems … MIS): Lead and manage the MIS function, including data entry, validation, reporting, and maintenance. Ensure learner records are accurate, compliant, and audit-ready. Manage ILR (Individualised Learner Record) submissions in line with DfE guidelines. Develop internal reporting tools to support performance and decision-making. Collaborate with delivery teams to ensure timely and accurate learner data capture. Funding … key point of contact for funding agencies and auditors. ________________________________________ Experience and Skills Required Proven track record of leading MIS and funding submissions Comprehensive understanding of current funding rules and audit partners (Skills England, Ofsted, etc.) Strong background in work-based learning or further education apprenticeships Advanced experience using MI systems and reporting tools (e.g. PICS and One-File) Skilled More ❯
Barton-Upon-Humber, South Humberside, North East, United Kingdom
Pertemps Newcastle & Gateshead
Systems and maximise funding accuracy and compliance across the organisations training provision. In this stand alone role, Youll be responsible for maintaining data quality, managing funding submissions, and ensuring audit readiness. A strong knowledge of apprenticeship and 1619 funding is essential, along with the ability to support internal teams and drive efficiencies. ________________________________________ Key Responsibilities Management Information Systems … MIS): Lead and manage the MIS function, including data entry, validation, reporting, and maintenance. Ensure learner records are accurate, compliant, and audit-ready. Manage ILR (Individualised Learner Record) submissions in line with DfE guidelines. Develop internal reporting tools to support performance and decision-making. Collaborate with delivery teams to ensure timely and accurate learner data capture. Funding … key point of contact for funding agencies and auditors. ________________________________________ Experience and Skills Required Proven track record of leading MIS and funding submissions Comprehensive understanding of current funding rules and audit partners (Skills England, Ofsted, etc.) Strong background in work-based learning or further education apprenticeships Advanced experience using MI systems and reporting tools (e.g. PICS and One-File) Skilled More ❯
their business risks most effectively. Working at BDO offers curious-minded people excellent exposure to all aspects of business strategy, operations and more.We’re a dynamic team of internal auditors, accountants, technology, and business transformation experts with disciplines in finance, risk, projects and change, cyber and digital, amongst others.Our extensive network and depth of experience mean we work … providing a collaborative, tailor-made advisory service. Our team helps clients manage their business-critical threats, such as cyber events, and build resilient businesses capable of responding to internal and external events which may interrupt their operations. Being known for exceptional client service in our chosen markets, we put innovation and agility at the heart of everything we … supporting clientsThe Privacy and Data Protection team supports clients across sectors with a range of privacy and data protection challenges which include implementation projects, data protection internalaudit services, data protection advisory, training delivery and provides outsourced DPO services.The role will need someone with experience in UK and EU Privacy and Data Protection regulation with an ability More ❯
their business risks most effectively. Working at BDO offers curious-minded people excellent exposure to all aspects of business strategy, operations and more.We’re a dynamic team of internal auditors, accountants, technology, and business transformation experts with disciplines in finance, risk, projects and change, cyber and digital, amongst others.Our extensive network and depth of experience mean we work … providing a collaborative, tailor-made advisory service. Our team helps clients manage their business-critical threats, such as cyber events, and build resilient businesses capable of responding to internal and external events which may interrupt their operations. Being known for exceptional client service in our chosen markets, we put innovation and agility at the heart of everything we … supporting clientsThe Privacy and Data Protection team supports clients across sectors with a range of privacy and data protection challenges which include implementation projects, data protection internalaudit services, data protection advisory, training delivery and provides outsourced DPO services.The role will need someone with experience in UK and EU Privacy and Data Protection regulation with an ability More ❯
their business risks most effectively. Working at BDO offers curious-minded people excellent exposure to all aspects of business strategy, operations and more.We’re a dynamic team of internal auditors, accountants, technology, and business transformation experts with disciplines in finance, risk, projects and change, cyber and digital, amongst others.Our extensive network and depth of experience mean we work … providing a collaborative, tailor-made advisory service. Our team helps clients manage their business-critical threats, such as cyber events, and build resilient businesses capable of responding to internal and external events which may interrupt their operations. Being known for exceptional client service in our chosen markets, we put innovation and agility at the heart of everything we … supporting clientsThe Privacy and Data Protection team supports clients across sectors with a range of privacy and data protection challenges which include implementation projects, data protection internalaudit services, data protection advisory, training delivery and provides outsourced DPO services.The role will need someone with experience in UK and EU Privacy and Data Protection regulation with an ability More ❯
their business risks most effectively. Working at BDO offers curious-minded people excellent exposure to all aspects of business strategy, operations and more.We’re a dynamic team of internal auditors, accountants, technology, and business transformation experts with disciplines in finance, risk, projects and change, cyber and digital, amongst others.Our extensive network and depth of experience mean we work … providing a collaborative, tailor-made advisory service. Our team helps clients manage their business-critical threats, such as cyber events, and build resilient businesses capable of responding to internal and external events which may interrupt their operations. Being known for exceptional client service in our chosen markets, we put innovation and agility at the heart of everything we … supporting clientsThe Privacy and Data Protection team supports clients across sectors with a range of privacy and data protection challenges which include implementation projects, data protection internalaudit services, data protection advisory, training delivery and provides outsourced DPO services.The role will need someone with experience in UK and EU Privacy and Data Protection regulation with an ability More ❯
their business risks most effectively. Working at BDO offers curious-minded people excellent exposure to all aspects of business strategy, operations and more.We’re a dynamic team of internal auditors, accountants, technology, and business transformation experts with disciplines in finance, risk, projects and change, cyber and digital, amongst others.Our extensive network and depth of experience mean we work … providing a collaborative, tailor-made advisory service. Our team helps clients manage their business-critical threats, such as cyber events, and build resilient businesses capable of responding to internal and external events which may interrupt their operations. Being known for exceptional client service in our chosen markets, we put innovation and agility at the heart of everything we … supporting clientsThe Privacy and Data Protection team supports clients across sectors with a range of privacy and data protection challenges which include implementation projects, data protection internalaudit services, data protection advisory, training delivery and provides outsourced DPO services.The role will need someone with experience in UK and EU Privacy and Data Protection regulation with an ability More ❯
manual effort while improving accuracy, traceability, and usability. Governance & Integration: Ensure that resilience processes are aligned with broader risk and control frameworks, including regulatory expectations and internalaudit requirements. Stakeholder Engagement: Collaborate with business service owners, risk leads, and technical SMEs to ensure resilience processes are practical, scalable, and embedded in BAU and crisis operations. Continuous Improvement More ❯
manual effort while improving accuracy, traceability, and usability. Governance & Integration: Ensure that resilience processes are aligned with broader risk and control frameworks, including regulatory expectations and internalaudit requirements. Stakeholder Engagement: Collaborate with business service owners, risk leads, and technical SMEs to ensure resilience processes are practical, scalable, and embedded in BAU and crisis operations. Continuous Improvement More ❯
Leeds, Yorkshire, United Kingdom Hybrid / WFH Options
Lloyds Bank plc
keep our systems compliant in a dynamic, evolving threat landscape. It's a chance to drive automation in network security, influence future security architecture, and ensure we meet internal controls and external regulatory requirements - all while working in an inclusive, collaborative team that values your growth and ideas. As a Network Security Senior Infrastructure Specialist, you will: Lead … Monitor and assure security compliance: Implement mechanisms to continuously track network security compliance across our cloud and on-prem environments, providing evidence and reports to satisfy internalaudit and external regulators. Drive security improvements: Proactively identify gaps or risks in network security posture and work with architects to shape new policies or architectural enhancements. Your insights will More ❯
Work Closely with the Head of IT Audit to Deliver the Plan Competitive Salary, Benefits and Flexibility on offer About Our Client A well know Financial Services business in Manchester Job Description The IT Audit Manager will be responsible for; Develop a sound understanding of the Group IT control environment and the IT Transformation Programme Plan and execute … a portfolio of technology audits across the businesses Carry out GIA risks assessment to providing specific risk inputs to the development of the annual audit plan. Execution and delivery of audits in line with audit methodology and IIA standards and budget. Produce IA reports which are impactful, balanced and address the root cause of issues. Ensure recommendations are … business and technology stakeholders including the CTO, CISO, CPEO and Programme Director. Stay abreast of emerging technology risks and best practice controls. With the agreement of the Heads of Audit and Chief Internal Auditor, perform risk advisory projects to support the IT business with high impact change initiatives. Work with and support business auditors to assess IT More ❯
aligned to business objectives, regulatory and customer expectations for BAE Plc Developing and maintaining a comprehensive assurance framework across cybersecurity (IT & OT), data and digital realms through robust internal controls across the enterprise, supply chain and programme specific requirements. Lead planning and execution of risk-based assurance activities including controls testing, thematic reviews and assurance reporting across federated … within BAE Plc Monitoring the cyber risk landscape and horizon-scan for emerging risks and regulatory developments including implications for control assurance Engaging with internal and external audit, regulatory inspections and customer assurance programmes ensuring alignment and minimising duplication Your skills and experiences: Extensive experience in cyber security assurance, risk oversight or internalauditMore ❯
manual effort while improving accuracy, traceability, and usability. Governance & Integration: Ensure that resilience processes are aligned with broader risk and control frameworks, including regulatory expectations and internalaudit requirements. Stakeholder Engagement: Collaborate with business service owners, risk leads, and technical SMEs to ensure resilience processes are practical, scalable, and embedded in BAU and crisis operations. Continuous Improvement More ❯
as global IT, Cloud Ops, and R&D functions to implement high-impact solutions and ensure technology operations meet international regulatory standards. Key Responsibilities Business Systems Analysis Understand internal business processes and identify opportunities for IT system improvements Translate business needs into clear, actionable technical requirements Manage implementation projects in partnership with Enterprise IT and business teams Ensure … liaison between technical teams and business units Regulatory Compliance Lead technology compliance efforts aligned with international standards (e.g., FDA 21 CFR Part 11, GAMP 5, ICH GCP) Conduct internal audits and support external audits from regulatory authorities and partners Drive risk assessments and implement mitigation strategies Maintain and enhance compliance documentation (SOPs, policies, validation protocols) Ensure systems validation More ❯
as global IT, Cloud Ops, and R&D functions to implement high-impact solutions and ensure technology operations meet international regulatory standards. Key Responsibilities Business Systems Analysis Understand internal business processes and identify opportunities for IT system improvements Translate business needs into clear, actionable technical requirements Manage implementation projects in partnership with Enterprise IT and business teams Ensure … liaison between technical teams and business units Regulatory Compliance Lead technology compliance efforts aligned with international standards (e.g., FDA 21 CFR Part 11, GAMP 5, ICH GCP) Conduct internal audits and support external audits from regulatory authorities and partners Drive risk assessments and implement mitigation strategies Maintain and enhance compliance documentation (SOPs, policies, validation protocols) Ensure systems validation More ❯
as global IT, Cloud Ops, and R&D functions to implement high-impact solutions and ensure technology operations meet international regulatory standards. Key Responsibilities Business Systems Analysis Understand internal business processes and identify opportunities for IT system improvements Translate business needs into clear, actionable technical requirements Manage implementation projects in partnership with Enterprise IT and business teams Ensure … liaison between technical teams and business units Regulatory Compliance Lead technology compliance efforts aligned with international standards (e.g., FDA 21 CFR Part 11, GAMP 5, ICH GCP) Conduct internal audits and support external audits from regulatory authorities and partners Drive risk assessments and implement mitigation strategies Maintain and enhance compliance documentation (SOPs, policies, validation protocols) Ensure systems validation More ❯
as global IT, Cloud Ops, and R&D functions to implement high-impact solutions and ensure technology operations meet international regulatory standards. Key Responsibilities Business Systems Analysis Understand internal business processes and identify opportunities for IT system improvements Translate business needs into clear, actionable technical requirements Manage implementation projects in partnership with Enterprise IT and business teams Ensure … liaison between technical teams and business units Regulatory Compliance Lead technology compliance efforts aligned with international standards (e.g., FDA 21 CFR Part 11, GAMP 5, ICH GCP) Conduct internal audits and support external audits from regulatory authorities and partners Drive risk assessments and implement mitigation strategies Maintain and enhance compliance documentation (SOPs, policies, validation protocols) Ensure systems validation More ❯
as global IT, Cloud Ops, and R&D functions to implement high-impact solutions and ensure technology operations meet international regulatory standards. Key Responsibilities Business Systems Analysis Understand internal business processes and identify opportunities for IT system improvements Translate business needs into clear, actionable technical requirements Manage implementation projects in partnership with Enterprise IT and business teams Ensure … liaison between technical teams and business units Regulatory Compliance Lead technology compliance efforts aligned with international standards (e.g., FDA 21 CFR Part 11, GAMP 5, ICH GCP) Conduct internal audits and support external audits from regulatory authorities and partners Drive risk assessments and implement mitigation strategies Maintain and enhance compliance documentation (SOPs, policies, validation protocols) Ensure systems validation More ❯