certifications such as CISA, CISSP, CRISC, or equivalent. Minimum of 3-5 years of experience in IT auditing within the financial services or banking sector. Strong understanding of ITgeneralcontrols, application controls, and risk-based audit methodology. Familiarity with banking regulations and standards (e.g., Basel III, SOX, PSD2). Excellent communication and reporting skills, with the ability to explain More ❯
you'll get to: SOX Program Leadership:Manage the IT SOX compliance program, including risk assessments, control mapping, and annual scoping. Control Design & Evaluation:Review, design, and enhance ITgeneralcontrols (ITGCs), application controls, and automated business process controls. Stakeholder Collaboration:Work closely with IT, Finance, Internal Audit, and external auditors to coordinate SOX testing and remediation efforts. Testing & Documentation More ❯
role you must have Demonstrable professional IT External or Internal Audit experience. Experience in delivering high quality integrated audits across IT/operations/finance including ITgeneralcontrols (ITGC), IT automated controls audit. Knowledge of payments, front-to-back-office controls, change programmes, and Operational resilience. Third Party Risk Management and Information Security auditing experience. Experience working for a More ❯
assessment and implementation of frameworks such as NIST 800-53 r5, NIST CSF2.0, CIS, ISO27K • Executing advisory & consulting engagements around regulatory risk & compliances such as DORA, NIS2, GDPR, SOX ITGC, PCI-DSS, HIPAA, Data Privacy, NHS, FFIEC etc. • Program and project manage GRC delivery engagements • Participate in strategic risk management and regulatory compliances transition and transformation engagements. • Develop knowledge base More ❯
with or within IT internal audit/external audit teams within a big 4 or similar corporate environment. Confident in designing and documenting new and/or existing ITGeneralControls from across access, change, and operations domains drawing on experience to do so independently and/or with minimal support. Working knowledge of COBIT/ITIL Frameworks Comfortable performing More ❯
grasp of emerging technologies and a commitment to continuous learning and innovation. A solid understanding of software development and architectural best practices is essential, as is familiarity with ITGeneralControls and regulatory compliance requirements. The candidate must be able to navigate complex technical landscapes while maintaining a focus on business value and strategic alignment. This role plays a critical More ❯
City of London, London, United Kingdom Hybrid / WFH Options
SMBC Group
grasp of emerging technologies and a commitment to continuous learning and innovation. A solid understanding of software development and architectural best practices is essential, as is familiarity with ITGeneralControls and regulatory compliance requirements. The candidate must be able to navigate complex technical landscapes while maintaining a focus on business value and strategic alignment. This role plays a critical More ❯
South East London, England, United Kingdom Hybrid / WFH Options
SMBC Group
grasp of emerging technologies and a commitment to continuous learning and innovation. A solid understanding of software development and architectural best practices is essential, as is familiarity with ITGeneralControls and regulatory compliance requirements. The candidate must be able to navigate complex technical landscapes while maintaining a focus on business value and strategic alignment. This role plays a critical More ❯
technical teams to ensure security controls are implemented and effective Assist in preparing for and responding to regulatory audits and compliance reviews (e.g., NIST CSF, ISO 27001, DORA, GDPR. ITGC) Maintain and update the information security risk register with appropriate scenarios and control frameworks Conduct regular control testing, evaluation and reporting findings to stakeholders Stay current on changes in regulations More ❯
I'm supporting a West Midlands-based client in their search for an IT Audit Manager to take ownership of IT-related audits, information security audits, and SOx ITGC testing across the UK and EMEA region. This is a hybrid role and requires 2 days per week in the office. Why consider this role? Lead IT audits and SOx compliance … travel across the UK and Europe Drive business improvement and strengthen ITcontrols Key responsibilities: Plan and deliver IT audits as part of the annual assurance plan Perform SOx ITGC testing, assess deficiencies, and support remediation plans Work with Risk, Finance, and IT teams to enhance business controls across multiple territories Conduct information security audits and provide recommendations Support external … auditors and liaise with regulators as needed Drive continuous improvement in IT assurance and control frameworks What we're looking for: Proven experience in IT Audit & SOx ITGC testing Strong knowledge of internal controls over financial reporting Excellent communication skills and the ability to engage stakeholders at all levels Relevant qualification (ISACA, CISA, IIA) Ability to work independently and manage More ❯
systems implementations, or Information Security Excellent interpersonal, written and oral communication skills, and ability to assimilate easily into teams Strong technical skills and a working knowledge of SOX ITGeneralControls, COSO, SOC 1, and SOC 2 Awareness of ISO 27001, NIST standards, HIPAA, FAIR, and other relevant standards Effective analytical and critical thinking abilities Entrepreneurial nature, self-motivated, ethical More ❯
systems implementations, or Information Security; Excellent interpersonal, written and oral communication skills, and ability to assimilate easily into teams; Strong technical skills and a working knowledge of SOX ITGeneralControls, COSO, SOC 1, and SOC 2; Awareness of ISO 27001, NIST standards, HIPAA, FAIR, and other relevant standards; Effective analytical and critical thinking abilities; Entrepreneurial nature, self-motivated, ethical More ❯
depth knowledge of IT risks and audit methodologies, including data analytics capabilities Previous experience and coverage of: IT security, including access management, perimeter security, and threat management. Solid ITgeneralcontrols (ITGCs) knowledge. IT outsourcing arrangements, including service delivery, supplier management, and data security considerations. IT governance, strategy, and operating models. Knowledge of IT frameworks (NIST, COBIT, ISO, ITIL) is More ❯
management industries and beyond. Our key offerings are internal audit (outsource and co-source) finance and risk management, compliance and technology. Joining the Agile Talent Community as an Interim ITGC Internal Auditor, you will have the freedom to work on projects that you choose, whether full or part-time within FS BRS and support our clients and internal teams on … short to medium-term assignments. Skills we are looking for Experience of delivering ITGC audit work including reviews of work papers, writing high quality reports, managing and clearing work with stakeholders, gained within the Banking sector. Excellent knowledge of web proxy technology, ideally Bluecoat, ZScalar and/or ZIA proxies. Experience of managing audit teams would be highly beneficial. What More ❯
management industries and beyond. Our key offerings are internal audit (outsource and co-source) finance and risk management, compliance and technology. Joining the Agile Talent Community as an Interim ITGC Internal Auditor, you will have the freedom to work on projects that you choose, whether full or part-time within FS BRS and support our clients and internal teams on … short to medium-term assignments. Skills we are looking for Experience of delivering ITGC audit work including reviews of work papers, writing high quality reports, managing and clearing work with stakeholders, gained within the Banking sector. Excellent knowledge of web proxy technology, ideally Bluecoat, ZScalar and/or ZIA proxies. Experience of managing audit teams would be highly beneficial. What More ❯
audit environment and bring technology audit, assurance or risk management experience. You'll also need a strong background in providing assurance over technology risks and controls such as ITGeneralControls and Automated Business Controls. Experience in reviewing applications and infrastructure, change programmes and payment scheme certifications (i.e. BACS, CHAPS, Faster Payments) would be beneficial. You'll also need: Excellent More ❯
Lead the programme on timely updating and upskilling of Risk control Matrix making sure the control description and relevant data fields are up to date. Work closely with the ITGC CoE to drive improvements in both the efficiency and effectiveness of the Company's SOX programme to increase the level of automated and preventive controls. Lead SOX scoping and risk More ❯
Who we are United by a sense of purpose towards our customers to be a trusted partner for the long-term and our universal banking platform in EMEA, SMBC Group has an international growth agenda and award-winning products, meaning More ❯
Who we are United by a sense of purpose towards our customers – to be a trusted partner for the long-term – and our universal banking platform in EMEA, SMBC Group has an international growth agenda and award-winning products, meaning More ❯
City of London, London, United Kingdom Hybrid / WFH Options
SMBC Group
Who we are United by a sense of purpose towards our customers – to be a trusted partner for the long-term – and our universal banking platform in EMEA, SMBC Group has an international growth agenda and award-winning products, meaning More ❯
South East London, England, United Kingdom Hybrid / WFH Options
SMBC Group
Who we are United by a sense of purpose towards our customers – to be a trusted partner for the long-term – and our universal banking platform in EMEA, SMBC Group has an international growth agenda and award-winning products, meaning More ❯
Cheltenham, Gloucestershire, United Kingdom Hybrid / WFH Options
Spirax-Sarco Engineering
G3 for IT, and will support the business in meeting its compliance, privacy, and risk reduction goals. Your objectives and responsibilities will focus on Leading the delivery of ITGeneralControls (G3 for IT) testing and assurance reporting. Managing the testing schedule using GRC audit tools (e.g., TeamMate) and prioritising control assessments. Providing actionable feedback and recommendations to stakeholders on … the Group's Information Security Management System (ISMS). Leading compliance assessments and maintaining a central repository of security and compliance documentation. Coaching team members and colleagues on ITGeneralControls and assurance practices. Your previous experience is likely to include . Proven experience leading IT assurance programmes. Substantial experience in security assessments and compliance oversight. Familiarity with ISMS and More ❯
deficiency evaluation methodologies. In-depth experience in the review of SOC-1 Type II reports and relevant CUEC mapping, including sub-service organizations. Working proficiency and understanding of ITGeneralControls, SEC guidance as it pertains to the SOX requirements for different filer types, PCAOB, and AICPA audit standards. Education and Experience Requirements: 5+ years of direct, client service/ More ❯
and automated testing frameworks. A strong grasp of Derivatives products, market structures, and quantitative modelling. Experience designing and delivering enterprise-level trading solutions, with a strong understanding of ITGeneralControls and enterprise data governance. Hands-on experience working in Agile delivery environments (Scrum, Sprints, Releases). Excellent communication skills with the ability to interact with stakeholders at all levels More ❯
NetSuite Administrator to manage the day to day administration and maintenance of the several Finance systems, including NetSuite, Rossum and Pleo What you'll do Handling system administration and ITGC responsibilities; Providing first-line user support, escalating issues as needed; Investigating and resolving technical issues across multiple finance systems, including system interface/integration issues; Ensuring financial and system controlsMore ❯