Internal Audit Manager

Sizewell C Company; Manchester; Hybrid; GBP 76,000 - 86,000; Full time

Benefits offered by this job

Up to 10% annual bonus

28 days annual leave

Extra holiday buying

Job summary

Sizewell C is seeking an experienced Internal Audit Manager, IT to join our Finance function. You will oversee multiple IT audits, lead engagements from planning to reporting, and challenge findings before escalation to senior leadership.

The role requires strong technology risk and governance expertise and a track record of managing audits in regulated environments. With hybrid work between Manchester and London, you will manage a team, coordinate with co-sourced providers, and help shape the

Qualifications

• Experience in IT internal audit, leading engagements from planning to reporting.
• Experience managing multiple audits in large or regulated organisations.
• Strong technology risk, cyber security governance and controls expertise.
• Ability to challenge findings and influence senior stakeholders.

Responsibilities

• Lead multiple IT internal audit engagements from planning through to reporting.
• Oversee audits on IT governance, cyber security, cloud services, IT operations, OT, data management.
• Review scopes, risk assessments, testing strategies, reports and actions.
• Coach and develop the Senior Internal Auditor and liaise with co-sourced providers.

Skills

IT Internal Audit

Leadership

Technology risk

Cyber security

Governance & controls

Stakeholder engagement

Project management

Audit planning

Data analytics

Education

CISA

CIA

ACA

ACCA

CPA

CA or equivalent

Tools

Microsoft Azure

Microsoft 365

SAP environments

Job description

Sizewell C's business is to design, finance, construct, commission, operate, maintain, and eventually decommission the nuclear power plant and related infrastructure at Sizewell C in Suffolk. Overall, whilst the Company is in the construction phase, the Boards' principal focus is on the development and construction of Sizewell C on time, on budget and to the highest quality and safety standards. The Company is maturing to meet all these requirements.

Sizewell C is economically regulated by OFGEM under the RAB model similar to other UK electricity distribution networks and Thames Tideway.

Sizewell C construction strategy is to replicate the design of Hinkley Point C, using the majority of the same supply chain, but innovating in the way it is delivered to achieve savings in time and cost of around 20%. The CCO will need to be guided by and incorporate lessons learned from the Hinkley Point C commercial delivery to achieve Sizewell C's ambition.

Following Financial Completion and Revenue Commencement, Sizewell C is fully funded and is owned by; The Secretary of State for Energy Security and Net Zero representing HM Government, La Caisse, Centrica, EDF and Amber Infrastructure.

Internal Audit Manager, IT

Location: Manchester or London, with hybrid working and attendance in the office 2 to 3 days per week. Travel between Manchester and London will be required as and when needed.

Contract: Permanent, full-time.

Salary: £75,840 to £86,000 per annum, depending on experience + bonus + benefits.

Benefits include:

• Up to 10% annual bonus.
• 28 days' annual leave, increasing to 30 days after five years of service, plus bank holidays.
• Opportunity to purchase extra holiday.
• Defined Contribution Pension Scheme with up to 7.5% employee contribution and 15% employer contribution.
• Private healthcare.
• Access to benefits portal offering a range of health, financial wellbeing and lifestyle options.

Closing Date: Wednesday the 7th of October 2026

The Opportunity

Sizewell C is looking for an experienced Internal Audit Manager specialising in IT to join our Finance function and help provide independent, objective assurance across technology, cyber security, data, operational technology and digital transformation risks.

This is a genuine manager-level opportunity for an established IT audit leader who can oversee several complex audits at once, lead engagements from initial planning through to final reporting and action tracking, and confidently challenge findings before they reach senior leadership.

You will direct and quality-assure the work of the Senior Internal Auditor, working alongside co-sourced audit providers and senior stakeholders across the organisation. You will also help shape our risk-based Internal Audit Plan, strengthen technology governance and controls, and support the continued development of our Internal Audit capability.

Why Join as an Internal Audit Manager, IT?

This role offers far more than responsibility for delivering individual audits. You will help shape the overall IT audit programme and provide assurance on some of the most important technology risks facing Sizewell C.

You will lead multiple audits simultaneously, manage and develop audit professionals, review and sign off work, challenge the quality of findings and reports, and provide clear assurance to senior leaders and governance forums. You will also have the opportunity to influence audit coverage as emerging technology, cyber threats and organisational priorities evolve.

With one direct report, this is an ideal opportunity for an established IT Audit Manager who enjoys combining hands‑on technical audit leadership with people management, quality assurance and senior stakeholder engagement.

What You'll Be Doing

As our Internal Audit Manager, IT, you will:

• Lead the delivery of multiple IT internal audit engagements from planning and fieldwork through to reporting, closure and action tracking.
• Oversee audits covering IT governance, cyber security, cloud services, IT operations, operational technology, digital transformation and data management.
• Review audit scopes, risk assessments, testing strategies, evidence, findings and reports to ensure a consistently high standard of work.
• Direct, coach and develop the Senior Internal Auditor, including workload allocation, performance management and development planning.
• Challenge findings and recommendations, ensuring reports are evidence-based, proportionate and clearly communicated.
• Build trusted relationships with senior stakeholders, acting as the primary Internal Audit contact throughout engagements.
• Provide assurance and insight to senior management and governance forums.
• Monitor emerging technology risks, cyber threats and regulatory developments and assess their impact on audit planning.
• Contribute to the development and continued refresh of the risk-based Internal Audit Plan.
• Coordinate effectively with co-sourced providers and other assurance teams to strengthen coverage and reduce duplication.

What We're Looking For

The hiring team is particularly interested in candidates who offer a combination of both IT Audit and Internal Audit experience. This could be someone that started in technology audit and gained broader internal audit experience, or someone from internal audit who has developed strong technology risk expertise. Having exposure to both is essential. The successful candidate will have:

• Recent and significant experience of IT internal audit.
• A proven track record of leading IT internal audit engagements from start to finish.
• Experience managing multiple concurrent audits within a large, complex or regulated organisation or a Big Four professional services environment.
• Essential line management experience, including coaching and developing auditors.
• Experience reviewing and signing off the work of other auditors.
• Strong technology risk, cyber security, governance and controls expertise.
• Experience assessing IT General Controls, including access, change and incident management, backup and recovery, system development and third‑party technology controls.
• The confidence to challenge audit findings and influence senior leadership stakeholders.
• Strong written communication, report writing, analytical and project management skills.
• Sound professional judgement, curiosity and professional scepticism.

Candidates must be professionally qualified or actively working towards a relevant qualification, such as:

• CISA
• CIA
• ACA
• ACCA
• CPA
• CA or an equivalent professional qualification

A degree in a relevant discipline such as business, IT, or project management would be beneficial, but is not essential.

Desirable, but not essential:

Experience in one or more of the following areas would be advantageous:

• Nuclear, energy, utilities or major infrastructure.
• Other complex or regulated industries such as FTSE 250 companies.
• Operational Technology and technology-enabled transformation programmes.
• AI governance, automation or emerging technology risks.
• Microsoft Azure, Microsoft 365 or SAP environments.
• Data analytics within audit planning, testing or reporting.
• Working with integrated assurance models and co-sourced providers.
• A Big Four or professional services background.

When joining Sizewell C, you may wonder why you are contacted by colleagues with an EDF email or see the EDF logo on portals that you access and/or documentation you receive; this is because we have partnered with EDF for the provision of a number of support services whilst we complete a successful transition out of the EDF group.

At Sizewell C we encourage and embrace diversity and how it can improve our experience and performance at work. It is a requirement that those who join us have the right to work in the UK. Whilst sponsorship may be a possibility that we can explore, we are fully committed to local recruitment where possible, and those already holding the right to work in the UK.

To be appointed to this role, you will need to meet the criteria for Security Vetting, which will, ordinarily, require you to have been a resident of the UK for at least three of the past five years.