IT Internal Audit Manager

Due to internal promotion, we are currently recruiting for an experienced IT Audit Manager.

As an IT Internal Audit Manager, you’ll lead and deliver effective audits across all areas of IT. You’ll work extensively with stakeholders across our IT department, to help shape the delivery of our audits and develop good working relationships with our IT colleagues. You'll also lead on audits covering all areas of IT, Information Security and Data. You’ll constantly be exposed to new areas and a breadth of work.

It is an exciting time to join Yorkshire Building Society and our Internal Audit function, as the business looks to grow and deliver its strategic priorities. Your role can make a real difference to the Society’s ability to manage its risks as it grows.

About the role

Some day to day responsibilities include:

• Leading the end-to-end delivery of high-quality and innovative IT, technology, information security and data audits from planning, through to report issuance.
• Supporting the wider team and audit activity through consulting and delivering technology and data relative integrated audit coverage.
• Delivering impactful and balanced reports on the adequacy of the control environment and root causes of issues, and assessment of risk management culture.
• Influencing colleagues across our IT teams to embed robust, cost-effective controls and strengthen the overall control environment.
• Maintaining knowledge of emerging technology risks, developments and trends to inform your audit and assurance activities.
• Monitoring key strategic programmes/developments across the IT space, through the creation of relationships with key individuals, and attendance at relevant risk forums.
• Helping shape the Internal Audit department through process improvement initiatives, training, coaching junior colleagues, and mentoring, to create a high performing function.

Please Note; This is a hybrid role, requiring attendance in the office one day per week, with additional office attendance required when audits are taking place.

About you

We’re looking for an experienced technology auditor with a relevant IT audit qualification (e.g., CISA, CIA, CISSP) or equivalent. In addition you will have:

• The ability to effectively plan and manage complex audits. This will include organising and managing colleagues assigned to audits.
• The mindset to find innovative ways of testing controls (such as the use of data analytics techniques, technical review of configuration, etc)

• Knowledge and experience of Technology Control frameworks (COBIT, NIST, ISO, NCSC or equivalent).
• Experience of carrying out audits in IT in the commercial sector, either in an external or internal audit capacity. Although financial services experience is preferred, this is not essential.