Internal Audit Manager – Cyber & Transformation

About the role

We are seeking an experienced Internal Audit Manager to lead technology‑focused audits within a large, regulated financial services organisation undergoing significant digital transformation. The role offers high visibility with senior stakeholders and the chance to shape the audit agenda across cyber, data and operational risk.

Key responsibilities

• Lead risk‑based operations and technology audits in line with professional internal audit standards.
• Plan and execute end‑to‑end audits covering IT general controls, cyber risk, data, change programmes and third‑party arrangements.
• Act as a trusted advisor to senior technology and business leaders, providing insight on risk and control effectiveness.
• Produce clear audit reports for senior management and the Audit Committee.
• Identify emerging technology risks and contribute to the annual audit plan.
• Provide assurance and challenge across major change initiatives, including digital transformation and outsourced services.
• Line‑manage and develop a team of auditors, overseeing performance and technical capability.
• Undertake quality‑assurance reviews to maintain consistency across the audit portfolio.
• Support ad‑hoc reviews, investigations and consultancy activities as required.

Required profile

• Professional qualification such as CIA, ACCA, CISA or equivalent.
• Proven internal audit experience in a commercial or regulated environment, preferably financial services.
• Strong understanding of operational and technology risk, controls and modern audit techniques.
• Experience leading audits of IT general controls, cyber security, data, cloud or systems implementations.
• Excellent communication skills with the ability to influence senior stakeholders.
• Demonstrated ability to apply regulatory and risk requirements pragmatically.
• Experience managing and developing audit team members.

Required skills

• IT general controls
• Cyber security
• Data management and analytics
• Cloud technologies
• Systems implementation auditing
• Third‑party risk management