IT Audit Manager

Exchange for Change; Milton Keynes; On-site; GBP 70,000 - 95,000; Full time

Benefits offered by this job

Bonus scheme

34 days holiday

5% employer pension contribution

Life Insurance

Private Medical Insurance

Income protection

Hybrid Working

Job summary

Exchange for Change in Milton Keynes is hiring an IT Audit Manager to lead independent assurance over IT systems, platforms and security. The role sits in Internal Audit & Risk, with hybrid work and two days remote per week, based at the Milton Keynes office.

You will plan and execute IT audits, use data analytics to support testing, and ensure effective risk management and reporting to senior stakeholders and ARC.

Qualifications

• 6+ years of IT audit experience in practice, risk or assurance.
• Experience with ITGC, cyber security, data protection and risk management.
• Qualified or working towards the listed certifications (CISA, CISSP, CRISC, ISO 27001 Lead Auditor).

Responsibilities

• Lead IT audits and use digital tools and data analytics to enhance assurance.
• Oversee ITGC, cyber security, data protection and DR/BC controls.
• Provide quarterly assurance to ARC on governance, risk and controls.
• Build strong relationships with Digital, Data and Technology teams.

Skills

IT audit leadership

Lead & governance

Data analytics

Stakeholder management

Education

CISA

CISSP

CRISC

ISO 27001 Lead Auditor

Job description

About us

At Exchange for Change, we are building something the UK has never had before. Working across England, Scotland and Northern Ireland, we are designing and delivering a Deposit Return Scheme from the ground up, creating a system that helps reduce litter and waste by encouraging people to return their empty drinks bottles and cans for recycling.

We are industry led, and driven by purpose. A national movement with a clear mission. No bottle unreturned. No can left behind.

This is not just another job. This is a rare opportunity to do meaningful work, shape a landmark national programme, and help deliver lasting positive impact for people, businesses and the planet alike.

Your role

The IT Audit Manager will lead and deliver independent assurance over EfC’s IT systems, digital platforms, infrastructure, security posture and resilience. You will oversee the planning and execution of IT audit activity, ensuring technology and data risks are well understood and effectively managed. You will use strong analytical skills, digital tools and data insights to enhance assurance, support IT risk awareness, oversee follow‑up actions, and maintain up‑to‑date knowledge of emerging technology, cyber and data risks.

You will be part of the Internal Audit & Risk team and work closely with Digital, Data and Technology (DDaT).

You’ll be based at our Milton Keynes office (30min from Euston) with the option to work from home 2 days per week.

Key Responsibilities & Priorities

IT General Controls (ITGC)

• Lead reviews of access management, privileged access and authentication controls.

• Oversee assessments of change management processes across digital and technology environments.

• Evaluate IT operations controls including backups, monitoring and incident management.

Cyber & Information Security

• Assess cyber security controls against recognised frameworks (e.g. ISO 27001, Cyber Essentials).

• Review vulnerability management, patching and endpoint/network security.

• Evaluate data protection controls including encryption, secure configuration and monitoring.

Business Continuity & Disaster Recovery

• Review business continuity and disaster recovery plans for design and operational readiness.

• Assess backup integrity, recovery testing and resilience of critical systems and data.

• Evaluate crisis management arrangements and alignment with EfC risk appetite.

Audit Delivery, Stakeholder Management & Continuous Improvement

• Lead the planning and delivery of IT audits, using digital tools and data analytics to enhance assurance.

• Provide assurance to the Audit, Finance and Risk Committee (ARC) on the effectiveness of IT governance, risk management and internal controls.

• Produce clear, concise audit findings and recommendations for senior stakeholders and the ARC.

• Build strong, influential relationships with Digital, Data and Technology teams to support constructive challenge.

• Oversee tracking and validation of follow‑up actions to ensure risks are mitigated effectively and sustainably.

• Provide independent advisory and risk-focused guidance on large-scale IT Transformation Programmes, supporting effective delivery, governance, resilience, and business outcomes.

What success looks like

• Clear, strategic insight into technology, data and cyber risks that strengthens EfC decision‑making.

• A maturing and resilient control environment across IT governance, risk management, ITGC, cyber security and digital platforms.

• Audit recommendations that drive timely, meaningful improvements supported by strong evidence.

About you

You will bring strong leadership in IT audit, good judgement and the ability to communicate confidently with senior stakeholders. You will have 6+ years of experience in IT audit, ideally gained in professional practice (though not essential), or within an internal audit, risk or technology assurance function. You will hold or be working towards a relevant qualification such as CISA, CISSP, CRISC, ISO 27001 Lead Auditor, or equivalent.

You will have experience working with digital platforms, cloud environments, modern technology stacks and data governance. You are comfortable using data analytics to support audit testing and confident assessing risks across digital transformation, automation, integration and emerging technologies. You are analytical, curious and proactive, committed to your own development and to strengthening IT and data risk awareness across EfC.

The opportunity

Work that makes a difference - and a place where you can too.

This is a once-in-a-generation opportunity to help establish a scheme of national importance, working with purpose-driven colleagues and partners to deliver visible, real-world impact. You’ll contribute directly to meaningful environmental and social change and in return, we support and reward our team through a range of benefits and initiatives, including:

Competitive base salary

Bonus scheme

34 days holiday inclusive of bank holidays, additional holidays for length of service

Flexibility with holidays. You may work on a local public holiday and take an alternative day off, giving you the freedom to celebrate the days that matter most to you.

5% employer pension contribution

Life Insurance: Cover of 4 times base salary

Private Medical Insurance: Includes GP access and an Employee Assistance Programme (EAP) for wellbeing support

Income protection

Family Leave: Maternity, adoption, parental, and paternity leave policies will be developed to be progressive and inclusive.

Hybrid Working: 60% office or field-based and 40% home-based, with some flexibility according to business and personal needs.