IT Auditor - Manager

Leading, highly regulated organisation is looking for an experienced Technology Internal Audit Manager to lead and deliver technology-focused internal audits across cyber security, IT infrastructure, data, and major change/transformation initiatives.

This is a hands-on leadership role where you'll partner with senior technology and risk stakeholders, provide clear assurance on control effectiveness, and drive practical recommendations that uplift security and resilience.

• Lead end-to-end technology internal audits (planning, fieldwork, reporting, and follow-up)
• Develop audit scopes, testing strategies, and high-quality working papers aligned to internal audit methodology
• Assess the design and operating effectiveness of controls across technology, cyber security, and data domains
• Produce clear, insightful audit reports outlining findings, root cause, risk impact, and pragmatic recommendations
• Manage multiple audits concurrently (including co-sourced delivery partners) without compromising quality
• Build strong relationships with technology leaders, executives, and other assurance providers
• Track and validate remediation actions, ensuring control uplift is real and sustainable
• Coach and develop team members, building capability in technology audit and risk-based assurance

About You

You'll bring strong technology assurance capability plus the maturity to engage confidently with senior stakeholders.

• Bachelor's degree in IT, Computer Science (or similar)
• Relevant certifications (one or more): CISA, CISSP, CIA, CA, CPA
• Demonstrated experience auditing:
  • Cyber security controls
  • Technology / infrastructure environments
  • Data & information controls
  • Transformation programs / major change
• Strong analytical skills and an ability to translate technical risks into clear business impact
• Proven experience leading, mentoring, and uplifting capability in a team

Desirable

• Experience in a regulated environment (e.g., financial services, insurance, banking, government, critical infrastructure)
• Working knowledge of risk and compliance expectations (e.g., governance frameworks and regulatory standards)