Specific Role Responsibilities:
Strategic Leadership:
- Develop and implement a risk-based audit plan aligned with business objectives and regulatory requirements.
- Oversee the end-to-end execution of complex technology audits, including cybersecurity, software development, IT infrastructure, data privacy, and ITGC.
- Perform continuous risk assessments to identify emerging technology risks and adapt the audit plan accordingly.
Stakeholder Engagement:
- Build and maintain strong relationships with senior management and the audit committee.
- Communicate audit findings, risks, and recommended actions effectively to stakeholders.
Team Management:
- Lead, mentor, and coach a high-performing team of technology auditors.
- Foster a culture of continuous learning, professional development, and alignment with UK working hours.
Quality Assurance:
- Ensure consistent application of internal audit methodology and adherence to ISACA, IIA, and other professional standards.
- Prepare and present comprehensive, high-impact audit reports articulating findings, root causes, and actionable recommendations.
Innovation and Continuous Improvement:
- Drive continuous improvement within the internal audit function by leveraging technology, including AI and advanced analytics.
- Ensure IT audit activities align with regulatory requirements and frameworks (e.g., NIST, ISO 27001, DORA).
Functional Area Responsibilities:
Technology Governance and Strategy:
- Develop a comprehensive, risk-based audit plan aligned to IT strategy.
- Assess IT governance, risk management, and internal control frameworks.
- Provide strategic advisory to executive management and audit committee on technology risks.
- Oversee audits of emerging technologies, including AI, ML, and RPA.
Cybersecurity and Information Security:
- Integrate cybersecurity into the audit plan, focusing on vulnerability management, access controls, and data protection.
- Evaluate the design and effectiveness of technical and administrative security controls.
- Assess incident response and crisis management readiness.
- Ensure compliance with data privacy regulations (e.g., GDPR, CCPA).
IT Operations and Infrastructure:
- Audit cloud governance, security, and controls.
- Review business continuity and disaster recovery plans.
Data Governance and Analytics:
- Assess data accuracy, integrity, and privacy across systems.
- Lead adoption of audit analytics for comprehensive data review.
- Evaluate risks associated with IT vendors and third-party providers.
Team Leadership and Management:
- Oversee audit execution and quality assurance activities.
- Attract, hire, and mentor skilled IT auditors to address complex technology risks.
Stakeholder Engagement and Influence:
- Build trusted relationships with senior leadership (CTO, CISO) and audit committees.
- Present findings and risk insights to influence executive decision-making.
- Foster a culture of risk awareness and strong internal control practices.
Experience Required:
- Minimum 15 years progressive IT audit experience, including senior leadership experience.
- At least 3 years in a first-line technology role (developer, infrastructure engineer, cybersecurity specialist, etc.).
- Bachelor's degree in Cyber/Information Technology, Computer Science, or related field; master's/MBA advantageous.
- Certifications: CISA, CISM, CISSP highly desirable; CIA advantageous.
- Deep technical expertise in cybersecurity, cloud platforms, network infrastructure, SDLC, data governance, and IT risk management frameworks.
- Strong analytical, problem-solving, and critical-thinking skills.
- Proven leadership, project management, and organisational skills.
- Exceptional written and verbal communication skills for technical and non-technical audiences.
- High integrity, professionalism, and professional scepticism.
