Information Technology Internal Auditor

Stanton House; Greater London; Hybrid; GBP 70,000 - 110,000; Full time

Job summary

Stanton House is recruiting for a global, digitally led marketing and technology services business to appoint an IT Internal Audit & Controls Manager. Based in London with a hybrid pattern (3 days in the office), you will shape the IT audit and controls plan and work directly with senior IT leadership to strengthen the organisation’s control environment.

This role goes beyond delivery: you will lead end-to-end IT audits, apply analytics to risk management, and contribute to AI governance

Qualifications

• CISA, CISM, CISSP or a relevant internal audit qualification.
• Strong IT internal audit, technology risk or IT controls experience.
• Solid understanding of IT general controls and IT audit methodologies.
• Experience operating in complex organisations, ideally with international exposure.
• Ability to assess an IT environment, identify risk and turn this into a practical audit and controls plan.
• Excellent stakeholder management and communication skills.
• Exposure to AI governance or related frameworks would be beneficial.

Responsibilities

• Assess IT environment to identify emerging risks and determine areas for audit and review.
• Leading end-to-end IT audits, targeted reviews and deep dives.
• Reviewing and strengthening the IT controls framework.
• Partnering closely with senior technology stakeholders, including IT and Information Security leadership.
• Producing clear, high-quality reporting for senior management and Audit and Risk Committee audiences.
• Tracking audit findings and supporting effective remediation of control issues.
• Applying data, technology and analytics to improve risk management and control effectiveness.
• Translating complex technical issues into clear, commercially relevant messages for non-technical audiences.
• Supporting AI governance initiatives as the organisation evolves.

Skills

IT internal audit experience

Technology risk

Stakeholder management

Communication skills

AI governance exposure

Education

CISA/CISM/CISSP or internal audit qualification

Job description

IT Internal Audit & Controls Manager | Global Digital & Technology Business

London | Hybrid, 3 days in the office

Stanton House are recruiting for a global, digitally led marketing and technology services business to appoint an IT Internal Audit & Controls Manager. Operating internationally, this is a complex, fast-moving organisation undergoing continued transformation. The successful candidate will join an evolving Internal Audit and Controls function at an exciting point in its development.

This is not simply an audit delivery role. You will have the opportunity to shape the IT audit and controls plan, identify emerging technology risks and work directly with senior IT leadership to strengthen the organisation’s control environment. The role also provides exposure to Audit and Risk Committee reporting and transformation initiatives, including AI-related work.

Working closely with the Head of Internal Audit and Controls, you will take ownership of the IT audit and controls agenda, acting as the subject matter expert across technology risk.

You will be responsible for:

• Assessing the IT environment to identify emerging risks and determine areas for audit and review
• Helping shape and deliver the IT internal audit and controls plan
• Leading end-to-end IT audits, targeted reviews and deep dives
• Reviewing and strengthening the IT controls framework
• Partnering closely with senior technology stakeholders, including IT and Information Security leadership
• Producing clear, high-quality reporting for senior management and Audit and Risk Committee audiences
• Tracking audit findings and supporting effective remediation of control issues
• Applying data, technology and analytics to improve risk management and control effectiveness
• Translating complex technical issues into clear, commercially relevant messages for non-technical audiences
• Supporting the organisation as its technology environment continues to evolve, including developments around AI governance

What we’re looking for:

• CISA, CISM, CISSP or a relevant internal audit qualification, alongside the technical expertise to deliver the role
• Strong IT internal audit, technology risk or IT controls experience
• A solid understanding of IT general controls and current IT audit methodologies.
• Experience operating in complex organisations, ideally with international exposure
• The ability to assess an IT environment, identify risk and turn this into a practical audit and controls plan
• Excellent stakeholder management skills, with the confidence to work with senior technology leaders
• Strong communication skills and an ability to make technical issues accessible to non-technical stakeholders
• A pragmatic, adaptable approach and the confidence to operate effectively when the brief is not fully defined
• Exposure to AI governance, tools or frameworks would be beneficial

Candidates from both industry and professional practice backgrounds will be considered.

Why this role?

• Ownership and influence: Help determine which IT risks and reviews the organisation prioritises
• Senior exposure: Work closely with senior IT and Information Security stakeholders
• Visibility: Contribute to reporting for senior governance forums
• Transformation: Gain exposure to an evolving technology landscape, including AI-related initiatives
• Opportunity to shape: Join an Internal Audit and Controls function that is still developing its combined approach
• Career step: A strong opportunity for someone ready to broaden their remit and operate with greater autonomy