Senior IT Internal Audit Manager

Senior IT Audit Manager

Location: Edinburgh, Birmingham or London — hybrid, minimum 2 days/week in the office.

Salary: Up to £110,000 depending on experience, plus an indicative bonus range of 30-60%

Benefits: Private medical cover, excellent pension, life assurance, career breaks, income protection, enhanced parental and carers leave, 3 volunteering days, and more

About the role

A leading UK financial services organisation is hiring a Senior IT Audit Manager into a genuine leadership position within a growing Internal Audit function at a pivotal point in its development. The function is market-leading and award-winning, led by a Chief Auditor and leadership team with a strong external reputation, and continues to pursue further industry recognition. The Head of Internal Audit for IT Change and Resilience joined the business this year and is actively shaping the team’s capability, structure and control environment — against a backdrop of real growth, including a recent acquisition that has expanded the business’s scale and complexity. This role carries leadership responsibility across an extended audit team of around 10, with genuine scope to grow further as the function scales.

This is an end-to-end, in-house audit role rather than a programme of repeatable, templated reviews. You will take the lead on audits — hands-on, on the ground, managing audit projects from scoping through to reporting and remediation tracking — across cyber security, operational resilience, AI governance and data governance, with each audit shaped by the specific risk in front of you. Cyber risk is a firm-wide priority at present, including remediation work tied to a Bank of England-mandated CBEST penetration test, so deep cyber security knowledge — including patch management and vulnerability scanning — is essential.

What you’ll do

• Take the lead on audit delivery, managing audit projects end to end — scoping, fieldwork, reporting and remediation tracking
• Lead and develop an extended audit team of around 10, setting direction, coaching capability and owning quality and delivery
• Lead and prioritise a portfolio of IT audits and ad-hoc projects, resolving resource conflicts and keeping delivery on track
• Provide assurance over cyber security control effectiveness, including patch management, vulnerability scanning, and CBEST penetration testing findings and remediation
• Deliver full-scope audit coverage across operational resilience, AI governance and data governance, including coverage as the business integrates recent acquisitions
• Build trust with senior technology stakeholders through evidence-led challenge, holding your own at a senior/executive level
• Partner with senior audit leadership to implement modern audit methods, including AI, and bring best practice into a growing function

What you’ll bring

• CISA as a minimum; CISM, CISSP or AIAA desirable, with relevant post-qualification experience
• In-house internal audit experience is essential — candidates from a predominantly external/advisory audit background are unlikely to be a fit for the depth of ownership this role requires
• A genuine track record taking the lead on audits and managing audit projects on the ground — through formal line management, project/engagement leadership, or both
• Demonstrable end-to-end experience across cyber security, data governance and AI audit specifically
• Deep cyber security knowledge, including patch management and vulnerability scanning audit experience, ideally with exposure to penetration testing frameworks and regulatory-driven remediation (e.g. CBEST or equivalent)
• Proven senior stakeholder influencing skills at CTO, CISO and -1 level
• Familiarity with key UK technology risk regulations
• Experience auditing outsourced processes and technical platforms (Microsoft Windows, Azure, AWS)

What’s in it for you

• Join a market-leading, award-winning Internal Audit function with a strong external reputation
• Genuine growth trajectory, including exposure to M&A integration audit work following a recent acquisition
• Real leadership scope in a function that’s actively being built out

Interested? Apply now or get in touch to find out more.