Principal Auditor (IT 3rd Party)

• Internal Audit is an independent, objective assurance function that is critical to meeting our business ambitions whilst also protecting the interests of our customers by ensuring that the internal control, risk and governance frameworks are always fit for purpose
• We look beyond financial risks and statements to consider wider issues such as the organisation’s reputation, growth, its impact on the environment and the way we treat our customers and employees
• As an IT Audit Assignment team member and sometimes leader, you will help deliver meaningful improvements across the business by engaging with Technology and other key stakeholders to identify risk and control improvements
• You will primarily support audits across Technology, IT Third-Party Risk Management and operational processes, whilst helping to build confidence and presentation skills through exposure to Senior Management
• This is a key role within the Internal Audit function for individuals with significant experience in Technology Audit, Technology Risk, Internal Audit or External Audit
• The successful candidate will have strong experience leading technology audits, a good understanding of technology security and third-party risk management practices, excellent communication skills and a collaborative approach to working with colleagues and stakeholders
• Planning & Risk Assessment
• Supporting the planning and scoping of technology audit assignments
• Identifying key technology, supplier and operational risks and controls
• Preparing audit planning documentation, risk assessments and testing strategies
• Leveraging data analytics, automation and AI-enabled tools where appropriate to enhance planning and risk assessment activities
• Audit Performance
• Designing and performing risk-based audit testing across technology and operational processes
• Assessing the effectiveness of controls over technology services, outsourced activities and third-party providers
• Producing high-quality audit workpapers in accordance with Internal Audit standards
• Utilising technology, data analytics and tools such as Microsoft Copilot to improve audit delivery and productivity
• Delivering assignments to agreed quality, budget and timelines
• Audit Reporting
• Communicating audit findings clearly and constructively to stakeholders
• Drafting high-quality audit observations and reports with minimal supervision
• Supporting discussions with management to agree actions and remediation plans
• Reviewing work performed by junior team members where appropriate
• Business Partnering
• Building effective relationships with Technology, Information Security, Procurement, Supplier Management and business stakeholders
• Maintaining regular engagement with key stakeholders to understand emerging risks and strategic initiatives
• Acting with integrity, professionalism and objectivity in all interactions
• Team Management
• Supporting, coaching and mentoring junior auditors
• Providing constructive feedback and helping to develop team capability
• Promoting collaboration, knowledge sharing and the effective use of technology across the team
• Audit Community
• Participating in initiatives that support continuous improvement of the Internal Audit function
• Sharing knowledge and best practice relating to technology risk, third-party risk management and technology-enabled auditing
• Contributing to a positive and inclusive team environment

Benefits

• 8% non-contributory pension plus up to 5% matching
• Life Assurance & Death in Service
• Support, feedback and development programmes to help you reach your full potential
• Flexible culture and ways of working
• Focus on health & wellbeing
• 30 days holiday as standard (excluding bank holidays), with the ability to purchase an additional 5 days
• Time off when you need it includes carer’s leave, faith leave, grandparent leave and career breaks
• New parents receive up to 26 weeks of full pay while on leave
• 4-week back-to-work transition for new parents: work 80% of your contractual hours, be paid for 100%
• New parents can take family leave in flexible blocks within the first year of birth/adaoption- The ability to quickly assess technology and supplier management processes and identify key risks, controls and improvement opportunities
• An ability and willingness to leverage technology, data analytics and AI-enabled tools such as Microsoft Copilot to enhance audit effectiveness and efficiency
• A collaborative working style and commitment to supporting team success; and
• Confidence to lead technology audit assignments with minimal supervision
• Excellent written and verbal communication skills, with the ability to communicate complex matters clearly to both technical and non-technical audiences
• A strong understanding of technology risk domains including IT operations, technology security, change management, cloud services, operational resilience and IT third-party risk management
• A strong understanding of the workings of both a Financial Services Group and an Internal Audit function
• Strong stakeholder management and influencing skills
• Communicate clearly, confidently and effectively
• Lead, motivate and develop others
• Be a strong team player who supports colleagues and contributes positively to team culture
• Challenge constructively whilst remaining open to challenge from others
• Be eager to learn, take ownership and embrace new challenges
• Analyse information quickly and exercise sound judgement; and
• Build strong relationships and work collaboratively across teams
• Demonstrate curiosity regarding emerging technology and third-party risks
• Demonstrated ability to work collaboratively within a high-performing team environment
• Experience using or willingness to leverage AI-enabled tools such as Microsoft Copilot to improve audit quality and efficiency
• Good understanding of technology security controls and technology governance practices
• Strong communication, stakeholder management and relationship-building skills
• Experience delivering Technology Audits, Technology Risk Audits or IT Control Reviews within Financial Services
• Experience of auditing Third-Party Risk Management, outsourcing arrangements or supplier risk frameworks
• Experience using audit management, data analytics and productivity tools
• Professional qualifications such as CISA, CISM, CRISC or equivalent would be advantageous- End Date: August 22, 2026