IT Audit Manager

Marks Sattin is currently working with a leading technology organisation who is recruiting for an IT Audit Manager. Working across the group wide function, you will be promoting effective internal controls and risk across key management.

With the recent merger and expansion of the business, the remit of the IT Audit team has been increased and the creation of the IT Audit Manager role has come through to fruition.

This business prides itself in working at the forefront of technology and in the role you will be responsible for:

• Planning, preparation and completion of the IT audit plan across international entities in accordance with defined quality standards and deadlines
• Support the Head of IT Audit in leading a team of auditors in the delivery of audits across the group
• Communicating and reporting audit findings to management
• Monitoring management's responses and implementation of agreed management actions
• Ensuring effective business changes are introduced as a result of audit findings.
• Continuously communicating with Internal Audit Management on the progress of audit assignments
• Suggesting beneficial changes to audit methodologies and procedures
• Liaising with external auditors as required
• Supporting submissions to the audit committee and addressing their queries
• Working with the Head of IT Audit, Director of Internal Audit, internal audit colleagues and other Heads of business units, including Technology, Commercial and Marketing to improve corporate governance, risk management and internal control
• Ability to build and maintain credibility with senior technology stakeholders

You be fully qualified (CISA, CISM,CISSP) and have advanced understanding of IT general controls (e. security, change management, disaster recovery, backup, data centre, infrastructure, etc.) You will have competent knowledge of IT and Information Security operations, policies and procedures in areas such as Windows Active Directory, Unix/Linux, databases. Knowledge of cloud architecture (AWS, GCP or Azure), operational frameworks and security controls would be beneficial.