Nottingham, Nottinghamshire, United Kingdom Hybrid / WFH Options
Experian Group
in computer science, management information systems, or a relevant field, or equivalent demonstrable experience. 5+ years' of experience in Information Security or Information Technology 3+ years' experience performing IT Audit or security control testing. Knowledge of internalaudit methodologies, including risk assessment, execution, and reporting. Proficiency in industry standards and frameworks (e.g., NIST 800-53, ISO More ❯
Southampton, Hampshire, United Kingdom Hybrid / WFH Options
NICE
Information Security Analyst - Audit, Compliance & Cybersecurity United Kingdom - Southampton At NICE, we don't limit our challenges. We challenge our limits. Always. We're ambitious. We're game changers. And we play to win. We set the highest standards and execute beyond them. And if you're like us, we can offer you the ultimate career opportunity that will … compliance, and readiness for external audits while also contributing to Cybersecurity Operations Center (CSOC) activities, including incident monitoring and response. How will you make an impact? InternalAudit Execution: Conduct internal audits to evaluate and enhance IT controls, compliance with standards, and risk management processes. Audit Preparation: Assist internal control owners in … scoping appropriate evidence and preparing for external audits. Gap Assessments: Facilitate and/or conduct internal gap assessments and audit readiness evaluations for frameworks such as ISO 27001, GDPR, and DORA. Framework Tracking: Monitor updates to Cyber Essentials, ISO, and regulatory frameworks and ensure internal alignment. Control Documentation: Develop and maintain control narratives, walkthroughs, and More ❯
York, Yorkshire, United Kingdom Hybrid / WFH Options
Hiscox
The Group InternalAudit team provides independent and objective assurance and advice to the Group Audit Committee, and to the Boards of Directors of the companies within the Group, over the processes and systems of control and risk management operating in the Group. IA's scope covers all aspects of the Group and its activities and … liaises closely with other monitoring functions across the Group, including Group Compliance and Group Risk. The Group Audit team is based in London, York, Luxembourg, Lisbon and the US. The team is supplemented with additional co-source when required. What you'll be doing As a part of a small but dynamic team, you will conduct mostly Technology and … business; working with and supporting other team members; contributing to IT Audits planning and strategy, and to its continued development; and helping to build and maintain InternalAudit's presence and reputation across the Group. Outside the plan, you may be asked to conduct specific reviews or to take on special projects. You will also be expected More ❯
Newcastle upon Tyne, United Kingdom Hybrid / WFH Options
NHS Business Services Authority
ll lead a team of specialists, manage security operations, and support various projects and initiatives. Your role involves ensuring compliance with security standards, managing incidents, and collaborating with internal and external stakeholders. Key Responsibilities : Lead and manage the Cyber Security Operations team. Ensure compliance with security standards (ISO27001, NCSC CAF). Manage security incidents and vulnerabilities. Collaborate with … third-party suppliers and internal teams. Provide expert advice on security technologies and processes. Requirements : Proven team leadership experience.Strong knowledge of security technologies (firewalls, IDS/IPS, SIEM).Relevant qualifications (CISSP, CISM, etc.). Apply now to make a significant impact on NHS BSA's cyber security strategy! What do we offer ?o 27 days leave (increasing with … efficient resolution. Conduct forensically sound acquisitions of computer systems and media for evidence collection. Provide advice and guidance in penetration testing and improving service offerings. Carry out reviews, internal audits, and spot-checks to ensure effective operation of security measures. Provide expertise in the design and implementation of specialist security technologies and cloud systems. About us Here at More ❯
Chorley, England, United Kingdom Hybrid / WFH Options
TVS Supply Chain Solutions UK & Europe
management and be able to communicate effectively at all levels. Main Duties & Responsibilities: Support the maintenance, development and continual improvement of ISBC Management System Coordinate and assist in internal audits to maintain ISO 27001 and ISO 22301 compliance Track and follow up on corrective and preventive actions resulting from audits or incidents Maintain documentation, records, and registers in … with compliance obligations Knowledge, Skills, Experience and Qualifications: Understanding of ISO 27001 and ISO 22301 frameworks, including risk management Strong organisational and documentation skills Experience with internalaudit, compliance review, or policy implementation Effective written and verbal communication skills, especially for reporting, training and stakeholder coordination Analytical and problem-solving skills to assist with incident response, risk … management, corrective actions and continual improvements Relevant experience in compliance, information security, risk, or operational support roles ISO Internal Auditor training certification a benefit Ability to communicate well at all levels up to and including board level Happy with occasional UK travel and hold a full UK driving licence In return for your hard work, we offer excellent More ❯
of systems and data, Lead the development and management of the People & Culture priority and Human Resources team, Manage the outsourced IT contract. Lead on the InternalAudit programme and strategy. Manage lease agreements for commercial lettings. Undertake the roles of Data Protection Officer (DPO), Anti-Money Laundering Reporting Officer and Approved Person FCA. 2.Main duties: list … under review financial and other systems and look for continuous improvement. 2.4Financial Accounting Prepare the annual accounts in accordance with statutory and internal requirements. Ensure that satisfactory audit arrangements exist, that these are cost effective, and that the timetables agreed with the auditors are met. Periodically arrange for the tendering of internal and external audit. … Advise the Chief Executive and Board on a system of internalaudit to ensure the adequacy of financial and operational controls. Ensure that the accounts are kept up-to-date in a form required for the preparation of statutory and management accounts. Advise the Chief Executive and Board on changes to accounting standards/disclosure requirements. 2.5Management More ❯
Swindon, Wiltshire, United Kingdom Hybrid / WFH Options
Zurich 56 Company Ltd
multiple demands for IT risk-based information within Zurich, ensuring all reporting commitments are met. You will work alongside local and regional Group IT functions, Service Providers (through internal and external suppliers), and business functions to ensure that Zurich is proactive in the management of IT Operational Risk and Controls. The role is varied, interesting, and there are … assessment, the annual IT operational resilience assessment and IT supplier risk assessments Maintain and operate IT risk and control frameworks that serve as a basis for regulatory compliance, internal control processes and management of IT risks and controls, influencing continuous improvement activity. Ensure compliance with IT-related policies and regulatory requirements; develop plan to remediate compliance gaps. Maintain … network with other governance colleagues, senior stakeholders and major partners across IT and the wider Zurich business. Provide regional support and co-ordination for external/internalaudit and other assurance processes. Manage the activity of the UK Supplier IT Risk and Controls Consultant and the IT Risk Consultant. What are we looking for? You will ideally More ❯
cross-functional teams operating internationally Relevant experience in risk identification, assessment, monitoring, and remediation will be highly desirable Experience in Front Line Risk, Operational Risk or InternalAudit is also beneficial Experience operating in a dynamic, project-based environment with variable stakeholders, shifting priorities, and tight deadlines Familiarity with end-to-end software product development, specifically with More ❯
with an unmatched ability to meet the needs of our clients. Markets Governance & Control works with the Markets businesses and functions including Compliance, Operational Risk and InternalAudit, to support identification, evaluation and management of operational and compliance risks in Markets Sales and Trading businesses. The 1st Line of Defence (1LOD) Markets Controls Testing team is part More ❯
Exeter, Devon, United Kingdom Hybrid / WFH Options
Met Office
make usgreater We keep evolving - pushing boundaries to make tomorrow better for ourcustomers Your world ofexpertise The role will be to lead data analysis within the internalaudit team and to support the Associate Director for the Office of the Chief Executive Officer (AD:OCEO) by providing business insight. Enhancing assurance by working with the team of … internal auditors analysing whole data sets. Advising the Head of InternalAudit with maturing the approach to data analytics within the internalaudit team. Supporting the Head of InternalAudit with analysis of annual questionnaires completed by Directors, providing insights for the Chief Executive Officer's annual governance statement. More ❯
US (MiFID II Annual Self-Assessment in EMEA) Project management of key markets-wide E-Trading initiatives and remediation of corrective actions arising from Regulatory and InternalAudit findings. Real-Time Monitoring of Citi's algorithmic trading activities for signs of disorderly trading. Design, deliver, and maintain Market's E-Trading Controls, such as Citi's golden … repository for E-Trading Strategies (algorithms)/Applications and the E-Trading limits management system. Lead reviews by global banking and securities regulators, Compliance testing, and InternalAudit of E-Trading business, including preparation of responses to findings and corrective action plans (as needed). Role Overview : Coordinate the MIFID II Annual Self-Assessment (ASA) on behalf … and Technology to remediate as required. What You'll Bring Relevant E-Trading experience preferably in a controls or trading related role (Trader/Desk Assistant, Middle Office, Compliance, Audit) Knowledge of E-Trading regulation and guidance Experience with the MIFID II annual self-assessment preferred Consistently demonstrates clear and concise written and verbal communication skills Excellent problem solving More ❯
South East London, England, United Kingdom Hybrid / WFH Options
Venn Group
including data collection, handling complex queries, following up on responses, and calculating levies due. Serve as the main contact for internal audits, ensuring timely delivery of the audit programme, tracking reports, arranging meetings, and monitoring progress on audit actions. Ideal Candidate Profile: Strong analytical background Proactive mindset in seeking ways to improve processes and efficiency Strong More ❯
Ipswich, Suffolk, United Kingdom Hybrid / WFH Options
Hays
Job Title: IT Compliance Specialist Key Responsibilities: Develop and implement IT compliance policies. Conduct internal audits (ISO27001, Cyber Essentials+). Identify and assess compliance risks. Prepare audit reports and recommend improvements. Provide compliance training to employees. Investigate and resolve compliance issues. Maintain compliance documentation. Collaborate with other departments for overall compliance. Ensure third-party vendor compliance. Work More ❯
Cambridge, Cambridgeshire, United Kingdom Hybrid / WFH Options
MealSuite
responsible for ensuring we are taking a holistic and mitigative approach to security, privacy, and compliance. A day in the life as a Director, Security, Privacy & Compliance: Security, Compliance & Audit Leadership Own and develop the security roadmap for our SaaS product and internal IT systems. Ensure compliance with SOC 2, HIPAA, GDPR, PIPEDA, and other relevant regulatory … framework. Lead SOC 2 audits and HIPAA compliance programs alongside external auditors and legal teams; conduct internal audits, risk assessments, and vendor security reviews. Act as the primary security and compliance leader, working with engineering, IT, Product, Finance, P&C, and other teams to align security initiatives with business goals. SaaS Product Security & Risk Management Implement application and … coding). Deploy and monitor threat detection, logging, and incident response programs for our cloud infrastructure. Conduct security risk assessments and work with development teams to remediate vulnerabilities. Internal IT Security & Risk Management Establish and maintain internal IT security policies and access controls. Oversee endpoint security and identity & access management (IAM). Implement and maintain security More ❯
Leeds, Yorkshire, United Kingdom Hybrid / WFH Options
Lloyds Bank plc
keep our systems compliant in a dynamic, evolving threat landscape. It's a chance to drive automation in network security, influence future security architecture, and ensure we meet internal controls and external regulatory requirements - all while working in an inclusive, collaborative team that values your growth and ideas. As a Network Security Senior Infrastructure Specialist, you will: Lead … Monitor and assure security compliance: Implement mechanisms to continuously track network security compliance across our cloud and on-prem environments, providing evidence and reports to satisfy internalaudit and external regulators. Drive security improvements: Proactively identify gaps or risks in network security posture and work with architects to shape new policies or architectural enhancements. Your insights will More ❯
is an area of the firm with tremendous growth potential. GRCS is an integral part of our Enterprise Risk advisory practice. We provide services relating to internalaudit, internal control, corporate governance, risk management and related assurance projects. Clients are based in the public sector and our services deliver added value to clients using modern … control assessment, risk management and audit techniques focusing on strategic, management and operational issues as well as financial management and reporting controls. We also work closely with other consulting teams including our colleagues in Technology Risk and Cyber Risk to ensure our clients receive the best possible advice and assurance. What will you be doing? • Creating annual internalaudit plans for clients • Providing internalaudit services on both outsourced and co-sourced contractual basis • Managing and directly delivering individual and/or a programme of internalaudit projects which includes planning, review, quality assurance and reporting • Risk management, governance and internalaudit advisory services • Risk identification More ❯
Bradley Stoke, Gloucestershire, UK Hybrid / WFH Options
KPMG UK
is an area of the firm with tremendous growth potential. GRCS is an integral part of our Enterprise Risk advisory practice. We provide services relating to internalaudit, internal control, corporate governance, risk management and related assurance projects. Clients are based in the public sector and our services deliver added value to clients using modern … control assessment, risk management and audit techniques focusing on strategic, management and operational issues as well as financial management and reporting controls. We also work closely with other consulting teams including our colleagues in Technology Risk and Cyber Risk to ensure our clients receive the best possible advice and assurance. What will you be doing? • Creating annual internalaudit plans for clients • Providing internalaudit services on both outsourced and co-sourced contractual basis • Managing and directly delivering individual and/or a programme of internalaudit projects which includes planning, review, quality assurance and reporting • Risk management, governance and internalaudit advisory services • Risk identification More ❯
City Of Bristol, England, United Kingdom Hybrid / WFH Options
KPMG UK
is an area of the firm with tremendous growth potential. GRCS is an integral part of our Enterprise Risk advisory practice. We provide services relating to internalaudit, internal control, corporate governance, risk management and related assurance projects. Clients are based in the public sector and our services deliver added value to clients using modern … control assessment, risk management and audit techniques focusing on strategic, management and operational issues as well as financial management and reporting controls. We also work closely with other consulting teams including our colleagues in Technology Risk and Cyber Risk to ensure our clients receive the best possible advice and assurance. What will you be doing? • Creating annual internalaudit plans for clients • Providing internalaudit services on both outsourced and co-sourced contractual basis • Managing and directly delivering individual and/or a programme of internalaudit projects which includes planning, review, quality assurance and reporting • Risk management, governance and internalaudit advisory services • Risk identification More ❯
South East London, England, United Kingdom Hybrid / WFH Options
KPMG UK
part of process re-engineering. We also work closely with other consulting teams through our Connected Consulting business and our colleagues in Technology Risk, Financial Transformation, InternalAudit and Cyber Risk to help ensure our clients receive the best possible advice and assurance. What will you be doing? Drive and lead the day-to-day execution of … Advisory Engagements (Sarbanes-Oxley assistance, Risk Assessments, Maturity Assessments, Internal Controls Diagnostics Reviews) for clients, including activities such as Design and development of risk assessments, development of SOX/ICFR frameworks, testing plans, working papers, production of reports summarizing results, and other deliverables based on the specific engagement requirements Serve as a coach and mentor and provide opportunities … industry Experience of auditing or assuring banking (or boarder FS) processes such as credit, valuations, EIR, lending. Experience of US banks’ processes is desirable. Knowledge of UK and US audit regulations Advanced problem solving and analytical skills with proven ability to use data effectively identify and resolve issues Ability to identify deficiencies, observations and recommendations in respect of a More ❯
Dungannon, Northern Ireland, United Kingdom Hybrid / WFH Options
Bela Recruitment
compliance & culture. Help answer customer queries around the companies ISO 27001 standards before & after contract/tender wins. Work with other departments to ensure ISO compliance & integration. Conduct internal audits to ensure compliance and identify areas for improvements. Full job spec on receipt of cv. Requirements 2+ years ISO 27001 experience, management, auditing and certification across a range More ❯
Templecombe, Somerset, United Kingdom Hybrid / WFH Options
Thales Group
support to bids, RFQ's and future prospects Create and maintain all required project plans in line with customer and Chorus 2 requirements Provide support to customer and internal audits Execute project tasks related to project management and SDM duties Understand, manage and maintain project activities in line with Chorus 2 requirements Ensure appropriate H&S aspects are … track and achieve financial targets against MYB and Year end Important Working Relationships: Core engagement with project delivery team and the Project Management Office Regular engagement with both internal and external stakeholders Manage the customer relationship to deliver contract performance when both positive and negative Escalate to the leadership team where help and support is required Present project More ❯
Bristol, Gloucestershire, United Kingdom Hybrid / WFH Options
HAYS
and dashboards using visual metrics in Power BI or Microsoft Excel to support decision-making. Support the preparation of statutory returns and returns to grant-making bodies or internal audits. Support the Finance team in ensuring income and expenditure is treated correctly under the Statement of Recommended Practice (SORP). Support the management of restricted, designated, undesignated and More ❯
Bristol, Avon, South West, United Kingdom Hybrid / WFH Options
Hays
and dashboards using visual metrics in Power BI or Microsoft Excel to support decision-making. Support the preparation of statutory returns and returns to grant-making bodies or internal audits. Support the Finance team in ensuring income and expenditure is treated correctly under the Statement of Recommended Practice (SORP). Support the management of restricted, designated, undesignated and More ❯
Reading, Berkshire, United Kingdom Hybrid / WFH Options
Cognibox
Information Security Lead Auditor Department: Audit Employment Type: Permanent Location: Reading, UK Reporting To: Regional Operations Manager Description Please note, that a full driving licence is required as this is a field-based role. Join our growing Lead Auditor teams across the UK! At ISOQAR, we draw on our experience, knowledge, and ambition to empower organisations to achieve their … across the UK . With onsite practical experience and deep knowledge of industry processes, policies, and regulations, you'll help clients reach their full potential. While internalaudit experience is helpful, it's not mandatory as we offer comprehensive training via our academy. Following your Global and Divisional inductions, you will embark on a 12-week training … varied, and no two days are the same. The responsibilities include: Getting to know our clients and their products Hosting opening meetings - let's help our clients understand their audit process as much as we can Leading on the audit - this is where your subject matter expertise comes into play Report writing - now the audit is complete More ❯
South East London, England, United Kingdom Hybrid / WFH Options
Walker Hamill
REF: AS53287 Job Title: InternalAudit & Risk Manager Industry: Professional Services Employment Type: Permanent Location: London West London/Hybrid Salary Guide: £70,000 - £80,000 + Bonus + Benefits Our client is a Professional Services company that helps organisations across multiple countries to realise their full potential in both their people and their products. The business … clients vary from some of the world's largest and most successful brands to local small businesses the world over. Description This is a newly created InternalAudit & Risk Manager role reporting to the Senior Manager InternalAudit & Risk with direct access to the Head of InternalAudit & Risk and regular … have significant exposure across all key financial and operational processes and issues, with ample opportunity to assume increased responsibilities over time. You will be tasked with establishing risk-based audit programs and executing financial controls and non-financial audits through planning and fieldwork and will be expected to produce timely and high-quality audit reports. In addition, you More ❯