AVP, IT Audit — Global Risk & Cyber Controls Leader

QNB Group; Greater London; On-site; GBP 110,000 - 150,000; Full time

Job summary

QNB Group is seeking an AVP for IT Audit to lead risk-based audits across its London, Paris, and Swiss operations. The role requires independent work, mentorship of junior staff, and strong expertise in information security and cloud technologies.

You will assess controls, identify improvements, and report findings across diverse regulatory environments while supporting group-wide audit methodologies and continuous improvement efforts.

Qualifications

• Bachelor degree in Information Technology or related subjects.
• Professional qualifications such as CISA/ CISSP / CIA / CGEIT/ CRISC.
• Minimum of 10 years of experience in IT audit in a major bank or leading audit firm, with at least 4 years in a managerial/leadership role.
• Strong experience in IT and information security auditing and/or risk management.
• Good understanding of technology risks, cyber security controls, cloud technologies, infrastructure, applications and data protection.
• Ability to independently plan and deliver audit assignments from scoping through to reporting.
• Experience supporting audits across multiple countries or international operations.
• Knowledge of regulatory and industry requirements affecting technology and information security.
• Strong written and verbal communication skills with the ability to engage technical and non-technical stakeholders.

Responsibilities

• Lead audit assignments and perform risk assessments.
• Evaluate the effectiveness of controls and communicate findings to management.
• Support delivery of group-wide technology and information security audits across international locations.

Skills

Stakeholder management

Analytical skills

Communication

Independent work

Education

Bachelor degree in Information Technology

CISA/CISSP CIA CGEIT CRISC

Job description

QNB Group is seeking an AVP for IT Audit to lead risk-based audits across its London, Paris, and Swiss operations. The role requires independent work, mentorship of junior staff, and strong expertise in information security and cloud technologies.

You will assess controls, identify improvements, and report findings across diverse regulatory environments while supporting group-wide audit methodologies and continuous improvement efforts.