IT Audit Manager (Financial Services)

Grant Thornton UK; Greater London; On-site; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Income protection

Matched pension

Life cover

Private medical

Professional subscriptions

Job summary

Grant Thornton UK is seeking an experienced IT Audit Manager to lead engagements across banking, insurance, asset management, fintech and payments clients in London. You will guide planning, scoping, testing and reporting, ensuring quality and on-time delivery.

You will review team work, provide feedback, and liaise with senior leaders to keep IT and financial audit plans aligned. Experience with SOC 1/ISAE 3402 and CASS is highly valued.

Qualifications

• Experience of managing IT audit engagements day to day and supervising junior colleagues.
• Strong knowledge of ITGCs, application controls and ISA UK 315A or equivalent qualifications.
• Good understanding of the UK regulatory environment including FCA and PRA.
• Experience with audit analytics and automated testing.
• Familiarity with fintech, payments, crypto or digital assets.

Responsibilities

• Manage the day-to-day delivery of IT audit engagements from planning to sign-off.
• Plan, perform and review testing of IT general controls and application controls.
• Provide assurance supporting financial statement audits and regulatory frameworks (SOC 1/ISAE 3402, CASS).
• Review team work and provide feedback; escalate complex issues with recommendations.
• Work with senior management to align IT and financial audit plans.
• Build relationships with client finance, technology and information security teams.
• Manage engagement budgets, hours and resourcing; flag scope changes early.
• Coach and develop team across multiple locations, including offshore colleagues; promote responsible use of AI and data tools.
• Participate in quality reviews and regulatory inspections.

Skills

IT audit management

ITGCs & application controls

Audit analytics & automated testing

UK regulatory knowledge (FCA / PRA)

Fintech/payments/crypto experience

SOC 1/ISAE 3402 reporting

Team coaching & offshore leadership

Education

ACA/ACCA/CA or international equivalent (CISA/CISM/CRISC as alternative)

Job description

• Manage the day-to-day delivery of IT audit engagements for banking, insurance, asset management, fintech and payments clients, from planning and scoping to reporting and sign-off
• Plan, perform and review testing of IT general controls (ITGCs), application controls and information produced by the entity, and link IT risks to risks of material misstatement
• Provide assurance that supports financial statement audits and the IT element of regulatory frameworks, including service organisation reporting (SOC 1/ISAE 3402) and client assets (CASS) and safeguarding work monitored by the Financial Conduct Authority (FCA)
• Review your team's work, give clear and timely feedback on control deficiencies, and elevate complex issues early with a recommended response
• Work closely with senior managers, directors and partners so IT and financial audit plans stay aligned, with no surprises
• Build relationships with client finance, technology and information security teams
• Manage engagement budgets, hours and resourcing, and flag scope changes early
• Coach and develop your team, including multi-location and offshore colleagues, and help them use AI and data tools responsibly
• Take part in quality reviews and regulatory inspections, and act on what they teach us

Benefits

• Income protection
• Matched pension
• Life cover
• Private medical, including anytime access to Doctor@Hand and Stronger Minds
• Professional subscriptions

• Experience of managing IT audit engagements day to day and supervising junior colleagues
• Strong knowledge of ITGCs, application controls and ISA (UK) 315A professional qualification (ACA, ACCA, CA or an international equivalent), or a recognised IT audit or security qualification (CISA, CISM or CRISC) with relevant experience
• A good understanding of the UK regulatory environment, including the FCA and the Prudential Regulation Authority (PRA)
• A record of high audit quality, shown by strong inspection or internal quality review results
• Solid IT audit experience in financial services, ideally from a Big 4 or mid-tier firm, or from internal audit or technology risk in a regulated firm
• CASS and safeguarding assurance experience
• Audit analytics and automated testing
• Experience of fintech, payments, crypto or digital assets
• SOC 1/ISAE 3402 reporting experience