City Of Bristol, England, United Kingdom Hybrid / WFH Options
KPMG UK
is an area of the firm with tremendous growth potential. GRCS is an integral part of our Enterprise Risk advisory practice. We provide services relating to internalaudit, internal control, corporate governance, risk management and related assurance projects. Clients are based in the public sector and our services deliver added value to clients using modern … control assessment, risk management and audit techniques focusing on strategic, management and operational issues as well as financial management and reporting controls. We also work closely with other consulting teams including our colleagues in Technology Risk and Cyber Risk to ensure our clients receive the best possible advice and assurance. What will you be doing? • Creating annual internalaudit plans for clients • Providing internalaudit services on both outsourced and co-sourced contractual basis • Managing and directly delivering individual and/or a programme of internalaudit projects which includes planning, review, quality assurance and reporting • Risk management, governance and internalaudit advisory services • Risk identification More ❯
Winchester, Hampshire, United Kingdom Hybrid / WFH Options
Hampshire County Council
excellent communication skills and experience of managing and controlling work to professional standards? If so, and you are also looking for an opportunity to develop your career in IT audit , this could be the role for you! The Southern InternalAudit Partnership (SIAP) provide internalaudit and consultancy services to a wide and … achieving improved outcomes. This is supported through our External Quality Assessment conducted by the IIA that confirmed our compliance against all aspects of the Public Sector InternalAudit Standards (PSIAS) and more recently our self-assessment against the Global InternalAudit Standards in the UK Public Sector that came into effect from April 2025. … SIAP offers a range of progression paths. Through continued support and developmental opportunities, you will be able to progress in your Audit career. The Role: In joining the team, you will be responsible for the delivery of IT audit assignments using a risk-based audit approach across a portfolio of partners and clients. You will work closely More ❯
Birmingham, Staffordshire, United Kingdom Hybrid / WFH Options
Goldman Sachs Bank AG
InternalAudit - Birmingham - Vice President - Software Engineer location_on Birmingham, West Midlands, England, United Kingdom WHAT WE DO At Goldman Sachs, our Engineers don't just make things - we make things possible. We change the world by connecting people and capital with ideas and solve the most challenging and pressing engineering problems for our clients. Our engineering … software and systems, architect low latency infrastructure solutions, proactively guard against cyber threats, and leverage machine learning alongside financial engineering to continuously turn data into action. InternalAudit Engineering is a part of Core Engineering Team in Goldman Sachs. In InternalAudit, we ensure that Goldman Sachs maintains effective controls by assessing the reliability … with laws and regulations, and advising management on developing smart control solutions. Our group has unique insight on the financial industry and its products and operations. InternalAudit Engineering owns a broad range of systems that enable the firm to address the cross-cutting need of Auditing. We are currently taking up initiatives to build new and More ❯
About the team: You will be joining our high-performing Group InternalAudit (GIA) team that plays a key role in providing independent assurance across the Group. GIA is a dynamic, proactive, and collaborative team that works in a cross-functional way to deliver assurance of the Group's key risks and controls. The team uses leading … audit tools and is committed to continuous improvement, learning, and development to maintain the capability to deliver value-adding, insightful assurance as the Group undertakes digital transformation. The role can be based from our London, Wolverhampton or Chatham office with occasional travel between offices, we also operate a hybrid policy. What you will be doing: As an Audit … also have the opportunity to support audits focused on lower levels of our cloud-native technology stack and contribute to change assurance. Your responsibilities will include: Working with Senior Audit Managers to deliver value-adding audits of technology, data, and digital risks in line with methodology, including: Identifying and testing key automated and semi-automated controls. Identifying and testing More ❯
Birmingham, West Midlands, West Midlands (County), United Kingdom Hybrid / WFH Options
Investigo
Head of Audit and Risk Location: Birmingham Based - Hybrid working - 1 day a month on site Salary: Up to £85,000 We're looking for a Head of Audit and Risk to lead with insight and impact, embedding best practices that support strong governance, operational resilience, and continuous improvement. As Head of Audit and Risk , you'll … lead the delivery of internalaudit, risk management, and Health, Safety & Environmental (HSE) practices. You'll provide trusted assurance to senior leadership and the Board, while driving improvement and enabling informed, confident decision-making across the business. Key Responsibilities: Lead and deliver the annual InternalAudit plan, overseeing scoping, fieldwork, and reporting. Provide expert … senior leaders across all areas of the business, building strong relationships and becoming a valued partner in decision-making. Essential Skills & Experience: Proven track record leading InternalAudit and Risk functions. Experience managing and developing high-performing teams. Deep understanding of audit methodologies, planning, and reporting. Experience working with senior stakeholders, including Boards or AuditMore ❯
Glasgow, Scotland, United Kingdom Hybrid / WFH Options
SThree
role? Deploy enhancements to the Risk, Controls and Governance Framework for all functions across the Global organisation Support the Risk and Control Owners to maintain the Risk and Internal Control registers, ensuring best practise guidelines are followed and quality standards are adhered to as set out in the Risk, Controls and Governance Framework Provide SME assessment of the … Controls and Governance KPI and Reporting packs as per key deadlines Produce the Risk, Controls and Governance reporting and analytics as required for the Risk and Compliance Committee or Audit Committee meetings. Skills, Knowledge & Experience ... Experience within a similar role (Assurance, InternalAudit or Internal Controls Design and Deploy) Knowledge of Risk Management … MoR/IIA) Or A minimum of 3 years of relevant internal experience in a Risk Management/Internal Controls & Governance/InternalAudit role. Benefits for our U.K. teams include: The choice to work flexibly from home and the office, in line with our hybrid working principles Bonus linked to company and More ❯
stakeholders; Developing and growing the practice; Leading and shaping the strategy and team. Connect to your skills and professional experience Background assessing, designing and implementing controls in an external audit, internalaudit, internal controls or equivalent role. Experience working as part of a multi-disciplinary team e.g. alongside technology specialists to identify automated controls. … standard practice in our industry and Deloitte is no exception. These controls provide important legal protection for both you and the firm. We are subject to a number of audit regulations, one of which requires that certain colleagues abide by specific personal independence constraints (e.g., in relation to any financial interests and employment relationships). This can mean that … you and your "Immediate Family Members" are not permitted to hold certain financial interests (shares, funds, bonds etc.) with audit clients of the firm, and also prohibitions on certain employment relationships (e.g., you are not permitted to hold a secondary employment role with SEC audit clients of the firm whilst being employed by the firm). The recruitment More ❯
stakeholders; Developing and growing the practice; Leading and shaping the strategy and team. Connect to your skills and professional experience Background assessing, designing and implementing controls in an external audit, internalaudit, internal controls or equivalent role. Experience working as part of a multi-disciplinary team e.g. alongside technology specialists to identify automated controls. … standard practice in our industry and Deloitte is no exception. These controls provide important legal protection for both you and the firm. We are subject to a number of audit regulations, one of which requires that certain colleagues abide by specific personal independence constraints (e.g., in relation to any financial interests and employment relationships). This can mean that … you and your "Immediate Family Members" are not permitted to hold certain financial interests (shares, funds, bonds etc.) with audit clients of the firm, and also prohibitions on certain employment relationships (e.g., you are not permitted to hold a secondary employment role with SEC audit clients of the firm whilst being employed by the firm). The recruitment More ❯
Manchester, Lancashire, United Kingdom Hybrid / WFH Options
Deloitte LLP
stakeholders; Developing and growing the practice; Leading and shaping the strategy and team. Connect to your skills and professional experience Background assessing, designing and implementing controls in an external audit, internalaudit, internal controls or equivalent role. Experience working as part of a multi-disciplinary team e.g. alongside technology specialists to identify automated controls. … standard practice in our industry and Deloitte is no exception. These controls provide important legal protection for both you and the firm. We are subject to a number of audit regulations, one of which requires that certain colleagues abide by specific personal independence constraints (e.g., in relation to any financial interests and employment relationships). This can mean that … you and your "Immediate Family Members" are not permitted to hold certain financial interests (shares, funds, bonds etc.) with audit clients of the firm, and also prohibitions on certain employment relationships (e.g., you are not permitted to hold a secondary employment role with SEC audit clients of the firm whilst being employed by the firm). The recruitment More ❯
Bristol, Gloucestershire, United Kingdom Hybrid / WFH Options
Deloitte LLP
stakeholders; Developing and growing the practice; Leading and shaping the strategy and team. Connect to your skills and professional experience Background assessing, designing and implementing controls in an external audit, internalaudit, internal controls or equivalent role. Experience working as part of a multi-disciplinary team e.g. alongside technology specialists to identify automated controls. … standard practice in our industry and Deloitte is no exception. These controls provide important legal protection for both you and the firm. We are subject to a number of audit regulations, one of which requires that certain colleagues abide by specific personal independence constraints (e.g., in relation to any financial interests and employment relationships). This can mean that … you and your "Immediate Family Members" are not permitted to hold certain financial interests (shares, funds, bonds etc.) with audit clients of the firm, and also prohibitions on certain employment relationships (e.g., you are not permitted to hold a secondary employment role with SEC audit clients of the firm whilst being employed by the firm). The recruitment More ❯
Leeds, West Yorkshire, England, United Kingdom Hybrid / WFH Options
HW FINANCE LIMITED
A leading global organisation is seeking an experiencedIT Audit Managerto join its UK-based internalaudit and advisory team. This position offers the opportunity to really take ownership and operate in a dynamic, high-visibility role with significant interaction across technology, risk, and business leadership. Working closely with the lead of the function, you will be … playing a key role in delivering not just hands on audit reviews, but providing an advisory approach as the business continues to evolve. Key Responsibilities Leadanddeliverrisk-based internal audits of IT operations, general IT controls, and security processes. Support the development of theannual IT auditas well as the advisory plan, ensuring alignment with business risks. Build strong … independent relationships across attendingIT governance forums and steering committees. Conduct and report on audit fieldwork—including the evaluation of internal control design and effectiveness, policy compliance, and regulatory requirements. Performadvisory and consultancy reviewson major IT initiatives including strategy, transformation programs, cloud projects, and system implementations. Present audit findings and insights to senior stakeholders,including preparing materials More ❯
North West London, London, United Kingdom Hybrid / WFH Options
SEFE MARKETING & TRADING LIMITED
people globally and is owned by the Federal Government of Germany. Securing energy now and for the future. Job description: IN SHORT We are looking for an experienced IT Audit Manager to lead the end-to-end delivery of IT audits across SEFEs group entities. This includes audits of IT general controls (ITGCs), infrastructure, applications, cloud environments, cybersecurity, and … major technology initiatives. The role ensures timely, high-quality execution aligned with both internal policies and business priorities. This position involves coordinating audit project teams, reviewing audit workpapers for clarity and accuracy, and developing a deep understanding of business operations. Building and maintaining strong relationships with process owners is essential to gain valuable insights, support effective … risk management, and help enhance overall IT governance. WHAT YOU'LL DO Support the development and execution of a risk-based internalaudit strategy that enhances governance, risk management, and internal controls across SEFE Group Design annual audit plans for the assigned vertical, aligning with key risks, strategic objectives, internal policies and More ❯
US (MiFID II Annual Self-Assessment in EMEA) Project management of key markets-wide E-Trading initiatives and remediation of corrective actions arising from Regulatory and InternalAudit findings. Real-Time Monitoring of Citi's algorithmic trading activities for signs of disorderly trading. Design, deliver, and maintain Market's E-Trading Controls, such as Citi's golden … repository for E-Trading Strategies (algorithms)/Applications and the E-Trading limits management system. Lead reviews by global banking and securities regulators, Compliance testing, and InternalAudit of E-Trading business, including preparation of responses to findings and corrective action plans (as needed). Role Overview : Coordinate the MIFID II Annual Self-Assessment (ASA) on behalf … and Technology to remediate as required. What You'll Bring Relevant E-Trading experience preferably in a controls or trading related role (Trader/Desk Assistant, Middle Office, Compliance, Audit) Knowledge of E-Trading regulation and guidance Experience with the MIFID II annual self-assessment preferred Consistently demonstrates clear and concise written and verbal communication skills Excellent problem solving More ❯
Sheffield, South Yorkshire, Yorkshire, United Kingdom Hybrid / WFH Options
British Business Bank
risk and control teams as well as work closely with first line support functions such as the Financial Crime Team and the Banks Risk & Compliance and InternalAudit teams. To be considered for this role you must have an in-depth knowledge and practical experience in the following: - Data Protection - Information Rights - Records Management - Information Risk You … papers for senior management, including Board Committees along with the ability to demonstrate the importance of building successful working relationships with other assurance functions such as InternalAudit and Risk. You will have experience in designing and implementing new risk and compliance systems/procedures as well as proven experience in an operational information governance management role More ❯
North West London, London, United Kingdom Hybrid / WFH Options
SEFE MARKETING & TRADING LIMITED
people globally and is owned by the Federal Government of Germany. Securing energy now and for the future. Job description: IN SHORT We are looking for an experienced IT Audit Manager to lead the end-to-end delivery of IT audits across SEFEs group entities. This includes audits of IT general controls (ITGCs), infrastructure, applications, cloud environments, cybersecurity, and … major technology initiatives. The role ensures timely, high-quality execution aligned with both internal policies and business priorities. This position involves coordinating audit project teams, reviewing audit workpapers for clarity and accuracy, and developing a deep understanding of business operations. Building and maintaining strong relationships with process owners is essential to gain valuable insights, support effective … Audits across group entities, including but not limited to ITGCs, infrastructure, applications, cloud, cybersecurity and major initiatives. Ensure timely execution, high quality, and alignment with business priorities Coordinate the audit project team, review audit workpapers to ensure clarity and accuracy Build and maintain strong relationships with process owners, gaining insights into operations Offer expert guidance to the business More ❯
London, South East, England, United Kingdom Hybrid / WFH Options
Oliver James
IT Audit Analyst Hybrid | Data Centre Industry | Permanent A key client of ours within the data centre space is looking to appoint an IT Audit Analyst to join their team on a permanent basis. This is an excellent opportunity to work within a business-critical function, supporting audit and compliance across IT systems and infrastructure. Key Responsibilities … Support the delivery of IT audit plans and risk assessments in line with internalaudit strategies Evaluate IT systems, applications, and controls for effectiveness and compliance Collaborate with cross-functional teams to identify risks and recommend corrective actions Assist with the development and improvement of audit methodologies and control frameworks Maintain awareness of industry best … practices and regulatory requirements (e.g. ISO, SOC, GDPR) Prepare audit reports and present findings to relevant stakeholders What We're Looking For: Previous experience in IT audit, information security, or risk management (in-house or external) Knowledge of audit tools, frameworks (e.g. COBIT, NIST), and security standards Strong understanding of IT general controls (ITGCs), infrastructure, and networks More ❯
Reading, Berkshire, United Kingdom Hybrid / WFH Options
Pertemps
the Control Test and Assurance Programme. This role requires solid experience in control testing within Information Security, with a focus on evaluating control effectiveness and ensuring compliance with internal policies and standards. This role will report directly to the Control Testing & Assurance Manager, with whom you will work to deliver the goals of the company to have a … be great to have/bring: Experience working in a regulated environment. Experience within the water utility industry or large, complex critical national infrastructure. Experience in internalaudit, external audit, or assurance functions related to IT or cybersecurity. Professional certifications such as CISA, CISSP, CRISC, or ISO 27001 Lead Auditor are advantageous. What's in it More ❯
Maidenhead, Berkshire, United Kingdom Hybrid / WFH Options
Danone
reports to executive leadership. Promote cybersecurity awareness and training across the organization. Maintain documentation and evidence for audits, certifications, and internal reviews. Collaborate with internalaudit, legal, and compliance teams to address findings and implement corrective actions. Monitor and enforce IT policies, procedures, and access controls to ensure consistent compliance across environments. Develop, implement, and … and IT teams to ensure DR plans are aligned with business requirements. Maintain documentation of DR procedures and ensure they are up to date and accessible. Collaborate with internal and external stakeholders to align IT and cybersecurity efforts with enterprise risk management. Lead cross-functional teams and foster a high-performance culture through coaching, agile practices, and talent … development. Build effective relationships with internal stakeholders (e.g., Executive Leadership, Supply Chain, Legal, Compliance, HR, Finance, Manufacturing, Commercial, R&D IT) and external partners (e.g., regulatory bodies, auditors, technology vendors, cloud providers). Navigate key challenges, including complex hybrid/multi-cloud environments, evolving cybersecurity regulations, budget constraints, and cultural transformation toward agile, product-oriented IT. About You More ❯
Cambridge, Cambridgeshire, United Kingdom Hybrid / WFH Options
Arm Limited
globe, with outstanding people who bring a diversity of ideas, this could be the role for you! About the Role As a leader in our SOX, InternalAudit & Risk team, you'll play a critical role in leading, planning, delivering and reporting on our IT compliance across the business and ongoing work to ensure the organization can … provide timely certification of compliance. You will be delivering insightful, risk-based audits that go beyond compliance - influencing decisions, shaping controls, and unlocking strategic value. Our SOX and audit plan spans all of Arm's operations, including cybersecurity, AI, advisory services, third-party risk - alongside traditional financial and compliance domains. What You'll Do Lead, manage, own and report … the IT quarterly self-assessment. Manage relationships with IT team and external auditors to ensure there is full collaboration and access to information. Review third-party vendor attestation and audit reports and provide assessment to business leaders risk owners. Working collegiately as part of the SOX team, supporting and delivering the overall team objectives. Proactively engage with IT and More ❯
Rochdale, Greater Manchester, North West, United Kingdom Hybrid / WFH Options
Footasylum Ltd
have a role to join us as a Compliance and Data Protection Officer. This standalone position, reporting into Legal is responsible for ensuring Footaylum adheres to legal standards, internal policies, and data protection regulations such as the GDPR, and other applicable privacy laws. The role is split into two key areas: Compliance Management Responsibilities Develop, implement, and maintain … Footasylums compliance framework, policies, and procedures. Monitor and report on compliance risks, breaches, and regulatory developments. Conduct internal audits and risk assessments to ensure adherence to legal and regulatory requirements. Provide training and guidance to staff on compliance-related matters. Liaise with regulatory bodies and manage responses to compliance inquiries or investigations. Data Protection Officer (DPO) Responsibilities Serve … PECR, and other relevant privacy laws. Proven experience developing and implementing compliance frameworks and internal policies. Excellent understanding of risk assessment methodologies and internalaudit processes. Strong stakeholder management and ability to influence at all levels. Excellent written and verbal communication skills, with the ability to explain complex regulations in plain language. High attention to More ❯
Manchester, Lancashire, United Kingdom Hybrid / WFH Options
Cognibox
Information Security Lead Auditor Department: Audit Employment Type: Permanent Location: Manchester, UK Reporting To: Regional Operations Manager Description Please note, that a full driving licence is required as this is a field-based role. Join our growing Lead Auditor teams across the UK! At ISOQAR, we draw on our experience, knowledge, and ambition to empower organisations to achieve their … clients across the UK. With onsite practical experience and deep knowledge of industry processes, policies, and regulations, you'll help clients reach their full potential. While internalaudit experience is helpful, it's not mandatory as we offer comprehensive training via our academy. Following your Global and Divisional inductions, you will embark on a 12-week training … varied, and no two days are the same. The responsibilities include: Getting to know our clients and their products Hosting opening meetings - let's help our clients understand their audit process as much as we can Leading on the audit - this is where your subject matter expertise comes into play Report writing - now the audit is complete More ❯
Reading, Berkshire, United Kingdom Hybrid / WFH Options
Cognibox
Information Security Lead Auditor Department: Audit Employment Type: Permanent Location: Reading, UK Reporting To: Regional Operations Manager Description Please note, that a full driving licence is required as this is a field-based role. Join our growing Lead Auditor teams across the UK! At ISOQAR, we draw on our experience, knowledge, and ambition to empower organisations to achieve their … across the UK . With onsite practical experience and deep knowledge of industry processes, policies, and regulations, you'll help clients reach their full potential. While internalaudit experience is helpful, it's not mandatory as we offer comprehensive training via our academy. Following your Global and Divisional inductions, you will embark on a 12-week training … varied, and no two days are the same. The responsibilities include: Getting to know our clients and their products Hosting opening meetings - let's help our clients understand their audit process as much as we can Leading on the audit - this is where your subject matter expertise comes into play Report writing - now the audit is complete More ❯
with an unmatched ability to meet the needs of our clients. Markets Governance & Control works with the Markets businesses and functions including Compliance, Operational Risk and InternalAudit, to support identification, evaluation and management of operational and compliance risks in Markets Sales and Trading businesses. The 1st Line of Defence (1LOD) Markets Controls Testing team is part More ❯
Portsmouth, Hampshire, South East, United Kingdom Hybrid / WFH Options
Robert Half
of assurance, compliance, and certification frameworks. Manage and sustain ISO accreditations (e.g., ISO 9001, 14001, 27001, and others) and integrate emerging AI standards into organisational processes. Conduct comprehensive internal and external audits, risk assessments, and compliance gap analyses across multiple regions. Collaborate with cross-functional teams to align certification objectives with corporate strategies, client expectations, and regulatory requirements. … key stakeholders. Drive risk-mitigation strategies within a complex, fast-paced organisational ecosystem. Qualifications & Experience: A minimum of five years' experience in assurance, certification, compliance, and internalaudit management. Demonstrable expertise in achieving and maintaining accreditation for standards such as ISO 9001, 27001, 14001, EcoVadis, 45001, 22301, 20000, and emerging AI standards. Proven track record conducting audits More ❯
Oxford, Oxfordshire, South East, United Kingdom Hybrid / WFH Options
Unipart
Security in providing oversight and challenge to that function Participate in periodic security related testing activities (e.g. Crisis planning events, DR exercises) Prioritise and manage response activities Drive the audit and client management aspects of the Information Security team, including client due diligence questionnaires, and help design more effective procedures in this space Improve and support relevant security metrics … youd be able to perform well in this role! Excellent written and verbal communication skills Previous experience within a GRC function, IT Security/Cyber team, InternalAudit or an IT environment Hands on practical experience of ensuring full compliance with legal & regulatory frameworks including ISO 27001 Risk management Strong leadership and communication skills, with the ability More ❯