Senior Internal IT Auditor - #2195819

Our client is a major UK energy and infrastructure organisation involved in delivering one of the country's most significant long-term investment projects. With substantial investment and a strong focus on technology, innovation and operational resilience, the business offers an excellent opportunity to contribute to a nationally important project that will help shape the UK's energy future.

As the organisation continues to develop, its Internal Audit function plays an important role in strengthening governance, risk management and internal controls across an increasingly complex technology environment.

Role Overview

An exciting opportunity has arisen for a Senior IT Internal Auditor to join a growing Internal Audit function. Reporting to the IT Internal Audit Manager, this role will provide independent assurance across technology, cyber security, IT governance, operational technology and digital transformation.

The successful candidate will take responsibility for planning and delivering IT audit engagements, assessing technology risks and controls, and working closely with stakeholders to identify weaknesses and recommend practical improvements.

This is an excellent opportunity to gain exposure to complex technology environments, major infrastructure programmes and emerging risks while contributing to the development of an established Internal Audit function.

Day-to-Day Activities

• Plan, lead and deliver IT internal audit engagements, from initial risk assessment and scoping through to testing, reporting and follow-up.
• Assess IT General Controls, including access management, change management, incident management, backup and recovery, and third-party technology controls.
• Conduct audits covering cyber security, IT governance, cloud infrastructure, operational technology, data management and digital transformation.
• Evaluate the design and effectiveness of technology controls, identifying weaknesses and recommending practical improvements.
• Prepare clear audit reports, presenting findings and recommendations to management and agreeing appropriate remediation actions.
• Monitor the implementation of agreed management actions, validating their effective closure.
• Support the development of the risk-based Internal Audit Plan, identifying emerging technology risks and changes to the control environment.
• Work collaboratively with internal stakeholders, external audit partners and other assurance teams to deliver effective audit coverage.

Experience Necessary

• A minimum of 3 years' experience in IT Audit, Technology Risk or IT Controls, ideally gained within a large, complex or regulated organisation. Experience in energy, utilities or major infrastructure would be advantageous.
• Proven experience delivering technology-focused audits, including risk assessments, control testing, reporting and remediation tracking.
• Strong understanding of IT General Controls, cyber security, technology governance and cloud environments. Exposure to operational technology, major change programmes or enterprise platforms such as Azure, Microsoft 365 or SAP would be beneficial.

Qualifications & Skills Needed

• Bachelor's degree and a recognised professional qualification such as CISA, CIA, ACA, ACCA, CPA or equivalent, or demonstrable equivalent professional experience.
• Working knowledge of the IIA Global Internal Audit Standards and recognised technology frameworks such as NIST and ISO 27001.
• Strong analytical, communication and report-writing skills, with the ability to engage stakeholders, challenge constructively and manage audit engagements independently.

Keen to find out more...

If this sounds like you please apply here or email [email protected] along with a copy of your CV & why you think you are a good fit.