Senior Internal Audit Manager - Technology
SKILLS
FULL DESCRIPTION
Senior Internal Audit Manager - Technology
The Senior Internal Audit Manager - Technology leads technology cyber audits, ensuring IT risk management and operational resilience across the [Employer hidden — view at passion-project.co.uk] Group, while mentoring the audit team and maintaining stakeholder relationships.
Senior Internal Audit Manager - Technology
[Employer hidden] London Victoria Office - Hybrid: 4 days in the office, 1 day working from home per week
Role Summary
The Senior Internal Audit Manager - Technology is responsible for leading the delivery of technology cyber-related, and third-party audit activity across the [Employer hidden] Group. The role provides independent assurance over IT risks, information security, operational resilience and technology-enabled business processes, while building and leading a high-performing technology audit capability within Group Internal Audit.
In this role, you will be a key strategic partner to the Chief Auditor, helping shape our technology assurance strategy and annual audit planning. You will also lead the development of a continuous third-party assurance framework to monitor the ongoing performance and risk of external service providers.
- There may be a limited degree of travel required to both Europe and other jurisdictions.
**Audit Delivery and Assurance**
- Lead the planning, execution and reporting of technology and cyber audits across the Group, including infrastructure, cloud, application security, identity and access management, data protection and IT operations.
- Deliver audits in line with Group Internal Audit methodology, professional standards and regulatory expectations.
- Perform risk assessments to identify high-risk technology areas and emerging risk themes.
- Produce clear, high-quality audit reports with practical, risk-based recommendations for senior management.
- Track, validate and challenge management actions to ensure timely and effective remediation of audit findings.
**Technology Risk Coverage**
- Provide audit coverage across key technology risk domains including:
- Cyber security and information security controls
- Cloud and third-party hosted environments
- Operational resilience and IT continuity
- Data governance and protection
- Identity and access management
- Change management and SDLC controls
- IT service management and asset management
**Team Leadership and Capability Building**
- Build, lead and develop the technology audit capability within Group Internal Audit.
- Provide day-to-day leadership, coaching and technical guidance to the audit team.
- Allocate work effectively across the team to ensure timely delivery and appropriate skill utilisation.
- Review audit workpapers and deliverables to ensure quality, consistency and adherence to professional standards.
- Support recruitment, onboarding and training of new team members where required.
- Develop audit methodologies, templates and technical guidance to improve audit efficiency and consistency.
- Foster a culture of continuous improvement, knowledge sharing and high performance within the team.
**Stakeholder Management**
- Act as a senior point of contact for Technology, Security, Risk and Compliance stakeholders.
- Build strong working relationships with senior management to ensure audit activity is well understood and appropriately scoped.
- Provide constructive challenge while maintaining a collaborative and pragmatic approach.
- Present audit results, risk themes and progress updates to senior leadership and governance forums.
**Audit Planning and Strategy**
- Support the development of the annual and multi-year technology audit plan based on risk assessment, regulatory priorities and business change.
- Identify opportunities to enhance audit coverage through thematic reviews, data analytics and automation.
- Contribute to the continuous improvement of Group Internal Audit processes and practices.
**Regulatory and External Engagement**
- Ensure audit activity aligns with relevant regulatory requirements and industry frameworks such as FCA operational resilience, DORA, ISO 27001, NIST and COBIT.
- Support interactions with external auditors, regulators and third-party assurance providers where required.
**Key Skills and Experience****Essential**
- Significant experience in technology audit, IT risk or information security within financial services or regulated environments.
- Proven experience leading teams or mentoring auditors in a professional services or in-house audit environment.
- Strong understanding of technology risk and control frameworks.
- Experience delivering end-to-end audits and managing a portfolio of audits independently.
- Ability to translate complex technical issues into clear, actionable insights for senior stakeholders.
- Strong organisational and stakeholder management skills.
**Desirable**
- Experience with cloud platforms such as AWS or GCP.
- Knowledge of operational resilience and regulatory change programmes.
- Professional certifications such as CISA, CISSP, CISM or equivalent.
- Experience working in fast-growth or scale-up organisations.
Why [Employer hidden]?
- Competitive Starting Salary with an annual discretionary bonusthat truly rewards your performance from day one.
- Dedicated Mentorship: Learn directly from experienced managers who are invested in your success.
- Cutting-Edge Technology: Leverage state-of-the-art tailor made tools and systems that enable you to perform at your best.
- Clear, Accelerated Career Progression: Defined pathways to leadership and specialist roles within [Employer hidden].
- Dynamic & Supportive Culture: Work in a collaborative environment where teamwork and personal growth are prioritized.
- Generous Benefits Package: Access competitive benefits tailored to your location, which typically include health care and social benefits.
- CentralOffice: A fantastic location with excellent transport links.
Ready to launch your career with a global FinTech? Click the ‘Apply’ Today and discover your potential at [Employer hidden]!