Information Technology Internal Auditor

Vallum Associates; City Of London; On-site; GBP 65,000 - 85,000; Part time

Job summary

Vallum Associates is seeking a Contract IT Internal Auditor for a 6-month term in the Energy sector, with 1 day a week in the London office. The role reports to the Head of Internal Audit and involves evaluating ISMS and QMS, delivering concise reports, and advising on risk and controls across the organisation and its subsidiaries.

The ideal candidate will hold CIA or PIIA, have proven audit delivery experience, and strong English communication, with familiarity in ISO standards and project

Qualifications

• CIA or PIIA qualified, or equivalent (mandatory).
• Proven experience independently delivering internal audits.
• Expertise in internal auditing and assurance techniques.
• Ability to quickly analyse processes and identify ineffective or non-compliant controls.
• Ability to identify solutions and make practical, proportionate recommendations.
• Ability to seek out and identify audit evidence.
• Excellent written and verbal English, with the ability to write clear, concise, evidence-based reports.
• Strong understanding of project management methodologies, including Agile.
• Strong understanding or experience of ISO 27001 and ISO 9001.
• Expert in MS Office.

Responsibilities

• Contribute to the delivery of the Internal Audit Plan.
• Audit company policies and processes, and the effectiveness of associated risk management and controls, plus ad hoc audit and assurance requests, including: the information security management system (ISMS) across the company and its subsidiary; the subsidiary's quality management system (QMS).
• Produce balanced, concise internal audit reports for auditees, management and the Audit and Risk Committee.
• Provide general advice and guidance on best practice, policy, process, risk and control.
• Provide project and programme assurance, including change and releases, working closely with delivery teams while maintaining independence.
• Carry out bi-annual risk and controls audits of the subsidiary's operations.
• Provide consultancy on business excellence and continuous improvement.
• Avoid conflicts of interest, bias and undue influence, and promptly disclose any actual or perceived impairment of objectivity to the Head of Internal Audit and Risk.
• Follow internal audit methodologies and support all findings with clear evidence.

Skills

Internal audit expertise

Risk management

Regulatory compliance

Analytical thinking

Agile understanding

Report writing

English proficiency

Education

CIA or PIIA qualified

Tools

MS Office

Job description

Contract IT Internal Auditor - 6 months - Energy Sector

• 1 day a week in London office
• 6 months initial contract
• Reporting to Head of Internal Audit

About the team....

The internal audit function strengthens the company's ability to create, protect and sustain value. It gives the Audit and Risk Committee and management independent, risk-based and objective assurance, advice, insight and foresight across the company and its subsidiary. It does this by verifying compliance with policies, procedures and controls, confirming they are fit for purpose, and making sure risks to the company's responsibilities are identified and managed.

Findings and recommendations are reported to the external auditors, the Audit and Risk Committee, the relevant Head of Departments, and the management and operators of the area under review. Services are delivered in line with the function's Quality Management System.

Internal IT Auditor Job purpose

• Internal audit's assurance and advisory remit covers the whole organisation, including all activities, assets, systems and people.
• This role carries out objective examinations of information, processes, systems and controls to highlight risks and give management independent assurance, advice, insight and foresight.
• You will evaluate the effectiveness of risk management, governance and internal controls, assess compliance with policies, procedures and regulatory requirements, and identify areas for improvement. Through evidence-based findings and practical recommendations, you will support informed decision-making, strengthen organisational resilience, enhance operational effectiveness and promote continual improvement.

Internal IT Auditor Key responsibilities

• Contribute to the delivery of the Internal Audit Plan.
• Audit company policies and processes, and the effectiveness of associated risk management and controls, plus ad hoc audit and assurance requests, including:
• the information security management system (ISMS) across the company and its subsidiary
• the subsidiary's quality management system (QMS)
• Produce balanced, concise internal audit reports for auditees, management and the Audit and Risk Committee.
• Provide general advice and guidance on best practice, policy, process, risk and control.
• Provide project and programme assurance, including change and releases, working closely with delivery teams while maintaining independence.
• Carry out bi-annual risk and controls audits of the subsidiary's operations.
• Provide consultancy on business excellence and continuous improvement.
• Avoid conflicts of interest, bias and undue influence, and promptly disclose any actual or perceived impairment of objectivity to the Head of Internal Audit and Risk.
• Follow internal audit methodologies and support all findings with clear evidence.

Internal Auditor Essential requirements;

• CIA or PIIA qualified, or equivalent (mandatory)
• Proven experience independently delivering internal audits
• Expertise in internal auditing and assurance techniques
• Ability to quickly analyse processes and identify ineffective or non-compliant controls
• Ability to identify solutions and make practical, proportionate recommendations
• Ability to seek out and identify audit evidence
• Excellent written and verbal English, with the ability to write clear, concise, evidence-based reports
• Strong understanding of project management methodologies, including Agile
• Strong understanding or experience of relevant standards, in particular ISO 27001 and ISO 9001
• Expert in MS Office

Desirable

• Proficiency in project management methodologies and techniques (e.g. ISO 21500, PRINCE2, APM) and experience working as part of a project team
• ISO 27001 accredited
• Understanding of risk management techniques, in particular ISO 31000, and its relevance to internal audit work