IT Audit Manager – Risk & Governance Lead

National Highways; Ideford; On-site; GBP 70,000 - 90,000; Full time

Job summary

National Highways invites applications for an IT Audit Manager within the Corporate Risk and Assurance division. The role leads IT audit planning, supervision of audits, and assurance engagements, helping ensure risk management and governance arrangements are robust.

You will collaborate with senior stakeholders, present findings at board level, and support development of robust IT controls across COBIT, ITIL, and NIST CSF frameworks. Some travel to regional offices is required.

Qualifications

• CISA or equivalent qualification required.
• Experience leading IT audit teams including line management.
• Proven ability to develop audit strategies and annual audit plans.
• Strong report-writing and communication skills for Executive and Board stakeholders.
• IT/OT audit experience with knowledge of COBIT, ITIL and NIST CSF.

Responsibilities

• Develop IT audit plan priorities and ensure resources to deliver timely, high-quality audits.
• Lead and manage a team of auditors on assignment, planning and delivery of the audit programme.
• Review audit documentation from terms of reference through to the audit report and action management to meet quality standards.
• Present key audit findings at senior meetings in a professional manner to stakeholders.
• Develop and maintain relationships with senior clients and stakeholders built on trust.

Skills

CISA

Audit leadership

Audit planning

Report writing

IT/OT security

Job description

National Highways invites applications for an IT Audit Manager within the Corporate Risk and Assurance division. The role leads IT audit planning, supervision of audits, and assurance engagements, helping ensure risk management and governance arrangements are robust.

You will collaborate with senior stakeholders, present findings at board level, and support development of robust IT controls across COBIT, ITIL, and NIST CSF frameworks. Some travel to regional offices is required.