Vice President - Internal Audit (Information Security)

Job description

Vice President - Internal Audit (Information Security)
Location: London (hybrid – on-site 2 days a week)
Salary: Up to £130,000 plus bonus

The Role:
We are looking for a Vice President of Internal Audit (Information Security) to add value and impact across the organisation. Reporting to the Director of Internal Audit, this critical role is responsible for providing integrated audit coverage, assessing the effectiveness of key applications and IT risks, and supporting organisational improvement initiatives. You will partner with internal and external stakeholders, monitor risks, and contribute to the overall strategic advancement of internal audit practices.
What You’ll Do:

• Build strong relationships across teams to identify risks and control issues.
• Conduct continuous monitoring of emerging threats, ensuring senior leadership remains informed.
• Contribute to the development of the Audit Plan and department-wide improvement projects.
• Lead initiatives such as continuous auditing, data analysis, and control dashboards.
• Represent the Internal Audit function during the absence of the Director.
• Lead audits focused on technology, information security, and high-level systems.
• Guide junior audit members by reviewing their work and providing coaching.
• Validate issue remediation and track business changes to address risks identified.
• Assist in integrated audits across divisions, contributing subject matter expertise in Information Security.
• Maintain proactive updates to management, ensuring transparency and progress during tasks.
• Stay informed on relevant frameworks, standards, and disciplines in technology and audit.
• Share knowledge with the broader Internal Audit team.

What We’re Looking For:

• Professional internal audit experience in financial services, with expertise in technology audits.
• Demonstrable subject matter expertise in financial systems and information security frameworks (e.g., ISO 27000, NIST, or COBIT).
• Knowledge of technology and regulatory requirements (e.g., GDPR, FFIEC, BCBS 239).
• Experience with security domains such as Access Management, Threat Management, and Data Protection.
• Technical understanding of operating systems, databases, networks, and middleware.
• Familiarity with advanced IT concepts such as data governance, predictive analytics, and cloud systems.
• Excellent analytical and problem-solving skills, combined with effective communication and stakeholder engagement abilities.

Desirable Qualifications:

• Bachelor’s degree in Computer Science, Engineering, or related disciplines.
• Relevant certifications such as CISA, CISM, or CISSP (required).
• Additional certifications including CIA, CGEIT, SANS, or Agile (desirable).

If you are interested and looking or your next role, please apply with a copy of your CV, or email [contact hidden]