a leading financial institution committed to excellence in compliance, risk management, and technological advancement. We are currently seeking an experienced IT Banking Auditor to join our InternalAudit team in Birmingham. This is a critical role, offering the opportunity to evaluate and improve the organisation's IT systems and controls in line with regulatory and operational standards. … best practices, and regulatory requirements (e.g., FCA, PRA, GDPR, ISO 27001, PCI-DSS). Collaborate with business and IT stakeholders to understand operational processes and system architecture. Prepare detailed audit reports and present findings to senior management. Support external auditors and regulatory examinations where necessary. Stay current on emerging technologies, threats, and audit techniques. Requirements: Essential: Bachelor's … equivalent. Minimum of 3-5 years of experience in IT auditing within the financial services or banking sector. Strong understanding of IT general controls, application controls, and risk-based audit methodology. Familiarity with banking regulations and standards (e.g., Basel III, SOX, PSD2). Excellent communication and reporting skills, with the ability to explain technical issues to non-technical stakeholders. More ❯
Nottingham, Nottinghamshire, United Kingdom Hybrid / WFH Options
Experian Group
in computer science, management information systems, or a relevant field, or equivalent demonstrable experience. 5+ years' of experience in Information Security or Information Technology 3+ years' experience performing IT Audit or security control testing. Knowledge of internalaudit methodologies, including risk assessment, execution, and reporting. Proficiency in industry standards and frameworks (e.g., NIST 800-53, ISO More ❯
Southampton, Hampshire, United Kingdom Hybrid / WFH Options
NICE
Information Security Analyst - Audit, Compliance & Cybersecurity United Kingdom - Southampton At NICE, we don't limit our challenges. We challenge our limits. Always. We're ambitious. We're game changers. And we play to win. We set the highest standards and execute beyond them. And if you're like us, we can offer you the ultimate career opportunity that will … compliance, and readiness for external audits while also contributing to Cybersecurity Operations Center (CSOC) activities, including incident monitoring and response. How will you make an impact? InternalAudit Execution: Conduct internal audits to evaluate and enhance IT controls, compliance with standards, and risk management processes. Audit Preparation: Assist internal control owners in … scoping appropriate evidence and preparing for external audits. Gap Assessments: Facilitate and/or conduct internal gap assessments and audit readiness evaluations for frameworks such as ISO 27001, GDPR, and DORA. Framework Tracking: Monitor updates to Cyber Essentials, ISO, and regulatory frameworks and ensure internal alignment. Control Documentation: Develop and maintain control narratives, walkthroughs, and More ❯
York, Yorkshire, United Kingdom Hybrid / WFH Options
Hiscox
The Group InternalAudit team provides independent and objective assurance and advice to the Group Audit Committee, and to the Boards of Directors of the companies within the Group, over the processes and systems of control and risk management operating in the Group. IA's scope covers all aspects of the Group and its activities and … liaises closely with other monitoring functions across the Group, including Group Compliance and Group Risk. The Group Audit team is based in London, York, Luxembourg, Lisbon and the US. The team is supplemented with additional co-source when required. What you'll be doing As a part of a small but dynamic team, you will conduct mostly Technology and … business; working with and supporting other team members; contributing to IT Audits planning and strategy, and to its continued development; and helping to build and maintain InternalAudit's presence and reputation across the Group. Outside the plan, you may be asked to conduct specific reviews or to take on special projects. You will also be expected More ❯
remedial action is taken and trends are monitored. Prepare and deliver training, education, and awareness sessions related to information security, assurance, and risk management. Work collaboratively with key internal and external stakeholders-including third-party suppliers-ensuring best practices and compliance with relevant legislation and standards. Stay informed on developments in legislation, practices, and tools related to information … security and data protection, fostering continuous improvement and innovation. Represent the organisation in internal and external meetings, promoting information security standards and contributing to relevant partnerships and working groups. Perform other duties as appropriate to the nature and level of the role. Regular travel across operational areas may be required. PERSON SPECIFICATION Knowledge: A Levels or equivalent. Recognised … Experience: Operational delivery of security assurance in a multi-site environment. Managing compliance with standards like PSN or SyAP. Developing and enforcing information security and assurance policies. Performing internal audits and managing accreditation processes. Facilitating high-level stakeholder engagement. Collaborating with external agencies and partners on security issues. Key Skills: Ability to manage workloads, meet deadlines, and adapt More ❯
remedial action is taken and trends are monitored. Prepare and deliver training, education, and awareness sessions related to information security, assurance, and risk management. Work collaboratively with key internal and external stakeholders-including third-party suppliers-ensuring best practices and compliance with relevant legislation and standards. Stay informed on developments in legislation, practices, and tools related to information … security and data protection, fostering continuous improvement and innovation. Represent the organisation in internal and external meetings, promoting information security standards and contributing to relevant partnerships and working groups. Perform other duties as appropriate to the nature and level of the role. Regular travel across operational areas may be required. PERSON SPECIFICATION Knowledge: A Levels or equivalent. Recognised … Experience: Operational delivery of security assurance in a multi-site environment. Managing compliance with standards like PSN or SyAP. Developing and enforcing information security and assurance policies. Performing internal audits and managing accreditation processes. Facilitating high-level stakeholder engagement. Collaborating with external agencies and partners on security issues. Key Skills: Ability to manage workloads, meet deadlines, and adapt More ❯
Newcastle upon Tyne, United Kingdom Hybrid / WFH Options
NHS Business Services Authority
ll lead a team of specialists, manage security operations, and support various projects and initiatives. Your role involves ensuring compliance with security standards, managing incidents, and collaborating with internal and external stakeholders. Key Responsibilities : Lead and manage the Cyber Security Operations team. Ensure compliance with security standards (ISO27001, NCSC CAF). Manage security incidents and vulnerabilities. Collaborate with … third-party suppliers and internal teams. Provide expert advice on security technologies and processes. Requirements : Proven team leadership experience.Strong knowledge of security technologies (firewalls, IDS/IPS, SIEM).Relevant qualifications (CISSP, CISM, etc.). Apply now to make a significant impact on NHS BSA's cyber security strategy! What do we offer ?o 27 days leave (increasing with … efficient resolution. Conduct forensically sound acquisitions of computer systems and media for evidence collection. Provide advice and guidance in penetration testing and improving service offerings. Carry out reviews, internal audits, and spot-checks to ensure effective operation of security measures. Provide expertise in the design and implementation of specialist security technologies and cloud systems. About us Here at More ❯
analysing and recommending changes to processes/systems within BUs, across multiple departments and the division as a whole. Responsibilities Contributing to the development, implementation and maintenance of internal governance frameworks, including policies, standards and procedures Maintaining compliance with relevant laws, regulations and industry standards (e.g. GDPR), through collaboration with risk owners in Legal, HR and other relevant … and reporting on the ongoing performance and effectiveness of the divisional ISMS, including the development and tracking of appropriate KPIs Coordinating the response to internal and external audit activities, including the collection and cataloguing of required evidence to the necessary standard Collaborating with InternalAudit team on the development, implementation and operation of ITGCs More ❯
analysing and recommending changes to processes/systems within BUs, across multiple departments and the division as a whole. Responsibilities Contributing to the development, implementation and maintenance of internal governance frameworks, including policies, standards and procedures Maintaining compliance with relevant laws, regulations and industry standards (e.g. GDPR), through collaboration with risk owners in Legal, HR and other relevant … and reporting on the ongoing performance and effectiveness of the divisional ISMS, including the development and tracking of appropriate KPIs Coordinating the response to internal and external audit activities, including the collection and cataloguing of required evidence to the necessary standard Collaborating with InternalAudit team on the development, implementation and operation of ITGCs More ❯
Healthcare. In this role, you will assist in managing external auditors, stakeholders, and third parties in line with the ISO 27001 ISMS Management System. Supporting the internalaudit team, handling complaints and incidents, and responding to queries will also be part of your responsibilities. Main duties of the job To provide support and advice in the development … Support the development and cascade of Information Governance guidance To be a point of contact within DHU for supervisory authorities and for individuals whose data is processed (employees, internal & external stakeholder etc.) Support DHU Healthcare with Data Privacy Impact Assessments across new projects. Coordinate and support the development of IG Action Plans with the IG lead and applicable … Healthcare. In this role, you will assist in managing external auditors, stakeholders, and third parties in line with the ISO 27001 ISMS Management System. Supporting the internalaudit team, handling complaints and incidents, and responding to queries will also be part of your responsibilities. Location: Derby What DHU can offer you: Working Patterns:We recognise that More ❯
Chorley, England, United Kingdom Hybrid / WFH Options
TVS Supply Chain Solutions UK & Europe
management and be able to communicate effectively at all levels. Main Duties & Responsibilities: Support the maintenance, development and continual improvement of ISBC Management System Coordinate and assist in internal audits to maintain ISO 27001 and ISO 22301 compliance Track and follow up on corrective and preventive actions resulting from audits or incidents Maintain documentation, records, and registers in … with compliance obligations Knowledge, Skills, Experience and Qualifications: Understanding of ISO 27001 and ISO 22301 frameworks, including risk management Strong organisational and documentation skills Experience with internalaudit, compliance review, or policy implementation Effective written and verbal communication skills, especially for reporting, training and stakeholder coordination Analytical and problem-solving skills to assist with incident response, risk … management, corrective actions and continual improvements Relevant experience in compliance, information security, risk, or operational support roles ISO Internal Auditor training certification a benefit Ability to communicate well at all levels up to and including board level Happy with occasional UK travel and hold a full UK driving licence In return for your hard work, we offer excellent More ❯
information security controls into our technology stack. This is a full-time position. Occasional after-hours work may be required to support incident response, high-priority vulnerability fixes, or audit activities. Develop and implement data protection governance: Design, implement, and enforce data protection and information security policies and procedures aligned with business objectives and regulatory requirements Support the development … of strategies to mitigate and monitor data protection risks and incidents Coordinate internal audits, assessments, and recommend improvements to enhance data protection posture Work collaboratively with the wider Information Security team to identify and develop a strategy to mitigate, manage, and monitor data protection risks and incidents Work collaboratively with other departments to ensure the alignment of security … mitigation, containment, and recovery processes Legal and regulatory conformance: Ensure conformance with relevant regulations (CCPA, GDPR, etc.) Manage ITG group data protection process, including all relevant external audits, internal assessments, and planning Ensure the accurate review of system configurations takes place to ensure alignment with data protection and information security best practices Ensure the documenting of configuration settings More ❯
looking for a career move that will put you at the heart of a global financial institution? Then bring your skills and experience to Citi's InternalAudit team. By joining Citi, you will become part of a global organisation whose mission is to serve as a trusted partner to our clients by responsibly providing financial services … that enable growth and economic progress. Team/Role Overview The Audit Manager is responsible for performing moderately complex audits and assessments of Citi's risk and control environments. This role ensures adherence to audit standards and regulations, collaborates with business leaders on solutions for emerging issues, and manages the timely delivery of high-quality assurance and audit reports. The Markets Technology Audit team provides technology audit coverage for Markets businesses, including Equities, Fixed Income, FX, and Commodities. This position will focus on providing technology audit coverage of key systems supporting these businesses globally. What you'll do Manage and execute audit activities: Effectively manage and execute audit activities for a component More ❯
in NIST to drive our Compliance Team's service offerings forward. Work with a innovative, industry-leading Cyber Security team Play a key role in the development of internal and client security programs Contribute to significant projects that support clients' compliance and risk management goals If you're ready to make an impact in Cyber Security, this role … is for you! Responsibilities: Ensure protection of information assets and technologies Participate in security audits like ISO27001, ISO27701, ISO20000, NIST-CSF, and IASME Governance Conduct and document internal audits for our clients Deliver security awareness training, including public speaking engagements Manage Third-Party Risk Management (TPRM) including vendor security reviews Assist the Sales Team with scoping engagements and … ISMS) certified to ISO27001 standards Knowledge of the Cyber Essentials Plus Scheme, GDPR, and Data Protection Act (2018) Strong communication skills and the ability to build relationships with internal and external stakeholders Hands-on experience in ISO27001 implementation and auditing Eligibility for Security Clearance Certifications Preferred: ISO/IEC 27001 Lead Implementer ISO/IEC 27001 InternalMore ❯
of systems and data, Lead the development and management of the People & Culture priority and Human Resources team, Manage the outsourced IT contract. Lead on the InternalAudit programme and strategy. Manage lease agreements for commercial lettings. Undertake the roles of Data Protection Officer (DPO), Anti-Money Laundering Reporting Officer and Approved Person FCA. 2.Main duties: list … under review financial and other systems and look for continuous improvement. 2.4Financial Accounting Prepare the annual accounts in accordance with statutory and internal requirements. Ensure that satisfactory audit arrangements exist, that these are cost effective, and that the timetables agreed with the auditors are met. Periodically arrange for the tendering of internal and external audit. … Advise the Chief Executive and Board on a system of internalaudit to ensure the adequacy of financial and operational controls. Ensure that the accounts are kept up-to-date in a form required for the preparation of statutory and management accounts. Advise the Chief Executive and Board on changes to accounting standards/disclosure requirements. 2.5Management More ❯
Coalville, Leicestershire, East Midlands, United Kingdom
Ibstock PLC
hearts and minds at the manufacturing facilities, ensuring ownership and sustainability of the system once hand over is complete. The role will work closely with various departments to maintain, audit, and improve systems, while developing key KPIs to track performance. Key Accountabilities: Lead the creation, development, and supporting implementation of the Reliability System across the group, with the involvement … a detailed implementation plan with clear milestones and deliverables, ensuring a smooth transition from current systems to Ibstock Safe Reliable Production System. Lead joint efforts with internalaudit teams to assess progress, identify areas for improvement, and ensure compliance standards. Establish, track, and report on reliability and maintenance KPIs to measure performance, drive continuous improvement and track More ❯
Swindon, Wiltshire, United Kingdom Hybrid / WFH Options
Zurich 56 Company Ltd
multiple demands for IT risk-based information within Zurich, ensuring all reporting commitments are met. You will work alongside local and regional Group IT functions, Service Providers (through internal and external suppliers), and business functions to ensure that Zurich is proactive in the management of IT Operational Risk and Controls. The role is varied, interesting, and there are … assessment, the annual IT operational resilience assessment and IT supplier risk assessments Maintain and operate IT risk and control frameworks that serve as a basis for regulatory compliance, internal control processes and management of IT risks and controls, influencing continuous improvement activity. Ensure compliance with IT-related policies and regulatory requirements; develop plan to remediate compliance gaps. Maintain … network with other governance colleagues, senior stakeholders and major partners across IT and the wider Zurich business. Provide regional support and co-ordination for external/internalaudit and other assurance processes. Manage the activity of the UK Supplier IT Risk and Controls Consultant and the IT Risk Consultant. What are we looking for? You will ideally More ❯
integration. Develop and monitor key performance indicators (KPIs) and metrics to assess month end reporting performance and ensure service level agreements (SLAs) are met. Manage relationships with external & internal auditors, tax authorities, and other stakeholders for audits and compliance checks. Provide strategic guidance and recommendations on balance sheet management related matters. Stay informed about industry best practices and More ❯
Internally Auditing Critical Areas of the Firm This role involves auditing key areas within the firm to minimize risks to regulators and external auditors. Audit teams collaborate with the Technology and Engineering divisions to ensure the firm operates safely and efficiently across its global footprint. Opportunities and Roles Applicants will be considered for multiple roles requiring this skill set. … The specific division and function opportunities vary based on business needs. Examples include: InternalAudit : Assess internal controls, advise management, and monitor implementation to ensure reliable financial reporting, compliance, and effective operations. Division-specific roles include: Business Technology Engineering : Focuses on audits related to software engineering, product management, and system design within Global Banking & Markets More ❯
is a rare opportunity to join a mission-driven organisation with a global impact in science, health, and research. This is a key position within the InternalAudit team, where you’ll be central to the delivery of the annual technology audit plan, providing independent assurance over IT risks, controls, and strategic projects. Your work will … Assess major IT systems and platforms – including cloud services, security frameworks, and data infrastructure Build relationships with stakeholders across the business, offering guidance and constructive challenge Contribute to non-audit responsibilities such as committee reporting, audit planning, and the evolution of audit methodologies Skills & Experience: Experience delivering IT audits, either in-house or from a consultancy background … with the ability to influence and advise at a senior level Professional qualification such as CISA, CRISC, CISM or CISSP highly desirable If you're looking to combine your audit expertise with meaningful purpose, this role offers a chance to make a real difference in a globally respected organisation. More ❯
and perform vulnerability management, remediation, and ensure the development of secure and compliant IT and business solutions, secure design, deployment and operation of cloud infrastructure/services and Internal IT security consultancy. You'll be responsible for: Responding to and/or escalating security alerts generated by the IT security toolset; Identification and remediation of IT security risks … IT Operations Team to assess security infrastructure, network and systems; Identify security risks, threats and vulnerabilities of networks, systems, applications and new technology initiatives; Perform and evaluate regular internal and external vulnerability scans; React to and initiate corrective action regarding security violations, attempts to gain unauthorized access, virus infections that may affect the network or other events affecting … Supplier Oversight activities by performing Technical Security related Risk Assessments as and when required; Provide expert technical security services as and when required for Client requirements, internalaudit, external audit and any prevailing Certification activities. You'll need to evidence the following qualifications, skills and experience: Excellent understanding of technical security processes, security operations, hardening techniques More ❯
jurisdictions, including SOX controls, GDPR, and local withholding/taxation rules Own the preparation and oversight of external payroll audits and financial audits and coordinate with internalaudit and external auditors Process Optimization & Technology Identify and implement process improvements, automation opportunities, and best practices in payroll systems and reporting Collaborate with IT and Finance on system upgrades … insights, and compliance updates Build, mentor, and lead a high-performing, geographically dispersed payroll team Foster a culture of accountability and continuous improvement Promote cross-functional collaboration with internal stakeholders (HR, Finance, Legal, etc.) to achieve payroll objectives and enhance overall efficiency Demonstrate leadership through a 'one-team' mentality and a growth mindset Skills/Qualifications: Bachelor's … global regions (North America, EMEA, LATAM, and APAC) Demonstrated success in leading large-scale payroll transformations Experience in a publicly traded environment with strong understanding of SOX and internal controls Exceptional leadership, communication, and stakeholder management skills Proficiency in global HCM and ERP platforms (e.g., Workday, Dayforce) Requires sitting or standing at will while performing work on a More ❯
questionnaires, establish and maintain a central repository of documentation available for Sales and Planning Team access. 🚀 Your next challenge: Lead and manage the organisation's ISO certification and surveillance audit processes. Develop and maintain policies, procedures and documentation to align with ISO and Global Pluxee standards. Identify, assess and prioritise IT risk across platforms & services, processes and projects, and … of Business Continuity strategy and planning Strong communication skills with the gravitas to influence senio.r leadership. Energetic with initiative, drive and an enthusiastic 'can do' approach. Internalaudit experiences an advantage. Manage relationship and organise annual external audits to maintain certification. 🔎 To get this challenge: Video call Discussion with TA Partner Video call Discussion with Hiring Manager More ❯
cross-functional teams operating internationally Relevant experience in risk identification, assessment, monitoring, and remediation will be highly desirable Experience in Front Line Risk, Operational Risk or InternalAudit is also beneficial Experience operating in a dynamic, project-based environment with variable stakeholders, shifting priorities, and tight deadlines Familiarity with end-to-end software product development, specifically with More ❯
with an unmatched ability to meet the needs of our clients. Markets Governance & Control works with the Markets businesses and functions including Compliance, Operational Risk and InternalAudit, to support identification, evaluation and management of operational and compliance risks in Markets Sales and Trading businesses. The 1st Line of Defence (1LOD) Markets Controls Testing team is part More ❯