Internal Audit Senior Manager (Business Risk Services)

Grant Thornton UK; Greater London; On-site; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Income protection

Matched pension

Life cover

Private medical

Job summary

Grant Thornton UK is seeking a Technology Internal Audit Senior Manager with a cloud focus to lead and deliver technology audit engagements, manage a portfolio of clients, and develop staff.

You will oversee planning conversations, ensure adherence to GT methodologies, and contribute to business development while maintaining strong client relationships across cloud security and IT resilience domains.

Qualifications

• Experience in technology internal audits or technology risk engagements.
• Strong knowledge of cloud governance and cloud platforms (AWS, Azure, Google Cloud).
• Experience auditing DevSecOps pipelines and CI/CD tooling.

Responsibilities

• Lead on allocated technology internal audit engagements and manage staff.
• Oversee delivery and maintain quality in testing and evidence gathering.
• Present findings to Audit Committees and senior management.

Skills

Cloud governance

IT audit

Cloud platforms

DevSecOps audits

Audit software

Microsoft Office

Tools

Audit software

Microsoft Office

Job description

• Take ownership and lead on allocated assignments in a way that exceeds client expectations while taking responsibility for managing and developing staff
• Be responsible for overseeing the delivery of a number of technology internal audit / technology risk engagements, and manage portfolio of technology audit / technology risk engagement and relationships with clients
• Support on business development activities, winning new clients and upselling services to existing clients
• Lead on planning conversations with clients, and in the preparation of draft terms of reference/audit planning documents
• Providing subject matter expert input into technology audit / technology risk engagements and overseeing fieldwork performed by more junior team members, ensuring all work is performed in accordance with Grant Thornton methodologies, that testing sufficient and appropriate testing has been performed, and evidence to support key decisions has been obtained
• Oversee, and review the work of, junior members of the team, supporting development and ensuring quality in the work performed
• Hold close-out meetings with clients to ensure that they have a full understanding of issues identified and these are agreed, and write reports summarising the key observations from the work performed
• Presenting reports and findings at Audit Committees and other senior management committees
• Support in the development of new technology audit / technology risk service lines and initiatives within BRS, with a focus (but not exclusively) on Cloud assurance
• Assist with the financial management of client relationships, including monitoring WIP, raising invoices, ensuring an adequate margin is achieved on engagements, and preparing budgets
• Leading on the developing annual audit plans

Benefits

• Income protection
• Matched pension
• Life cover
• Private medical, including anytime access to Doctor@Hand and Stronger Minds
• Professional subscriptions

Knowledge and familiarity with the Cloud Security Alliance Cloud Controls Matrix, cloud vendor Well Architected frameworks and Agile methodologiesExperience of building extensive and active networks which across geographical regions and client organisationsExperience of managing internal audits of large companies in addition to dealing with complex technical mattersExperience of delivering a technology audit / technology risk covering a broad range of areas, including cyber and network security, IT resilience, IT transformations, IT strategies, data protection, supplier management, and otherJoining us as a Technology Internal Audit - Senior Manager (with a Cloud focus), the minimum criteria you’ll need is a professional qualification (CISA, CCAK, CCSK, CCSP etc.) with post qualification experience, and to be confident managing a large portfolio of internal audit clients. It would be great if you had some of the following skills, but don’t worry if you don’t tick every box, we’ll help you develop along the wayIdeally a good track record of performing IT audits over DevSecOps / CICD pipelines, including release management, source code management, testing, security, use of tools and automationYou’ll be proactive rather than reactive in your approach and personal goals are congruent with those of the firmExtensive experience of using audit software and Microsoft packagesStrong experience of a range of cloud governance, technical configuration, and cloud specific topics such as security, data protection/privacy, availability, resilience, disaster recovery, performance, cost management, third-party management, and change managementExperience of auditing public (such as AWS, Azure and Google Cloud) and/or private (such as VMWare) cloud platformsExperience of scoping, delivering, and reporting on technology internal audits, and in presenting conclusions to relevant stakeholders