IT Auditor

EG Group; Blackburn; On-site; GBP 47,000 - 58,000; Full time

Job summary

A global convenience retailer is seeking an experienced IT Auditor to enhance their IT risk and control environment. The role involves leading risk-based audits, evaluating security controls, and producing comprehensive reports. Candidates must have a Bachelor's degree, CISA certification, and significant experience in IT audit. Join a company committed to innovation and customer service.

Benefits

Performance Based Bonus Scheme

Flexible working hours

Access to Apprenticeships

Career development opportunities

15% ASDA Discount Card

Free Secure Car Parking

Meals at affordable prices

Dress Down Fridays

Prayer and Ablution Facilities

Work Anniversary Rewards

Free Eye Test

Qualifications

• Minimum 5 years’ experience with at least 3 years in IT audit or compliance.
• Hands-on SOX 404 / ICFR experience required.
• Experience in large public companies or consulting firms is desirable.

Responsibilities

• Lead risk-based audits of IT general and application controls.
• Evaluate the security and monitoring controls across systems.
• Produce risk-rated reports with actionable plans for improvements.

Skills

Analytical skills

Communication skills

Problem-solving skills

Education

Bachelor's degree in IT or related field

CISA certification

Job description

Overview

Role: IT Auditor

Location: Blackburn, BB1 2FA - Office Based (Relocating to Bolton)

Contract: Permanent / Full-Time

Salary: £47,025 - £57,475

Company: EG Group

About the Role: We have an exciting new vacancy for an IT Auditor to join our Group Internal Audit team, reporting directly into the Head of Internal Audit. This is a hands-on role where you will play a key part in strengthening our IT risk and control environment. You will be responsible for planning and delivering risk-based IT audits across our global technology estate, covering both on-premises and cloud-based systems. Working closely with stakeholders, you will provide independent assurance over IT controls and help strengthen our overall IT risk and control environment.

The ideal candidate will be proactive, detail-oriented, and experienced in IT audit, risk, and compliance. You will bring strong technical knowledge, alongside excellent communication and problem-solving skills, to challenge and support the business effectively. If you thrive in a fast-paced global organisation, enjoy working across different technologies, and want to make a real impact, then we would love to hear from you. Apply today and take the next step in your career with EG Group.

What you'll be doing

• Partner with the Group Head of Internal Audit to maintain a risk-based IT audit plan and evaluate ICFR/SOX coverage, including ITGCs, automated controls, access controls, key reports, and third-party assurances.
• Lead risk-based audits of IT general and application controls across business-critical on-premises and cloud systems, including ICFR and key/IPE reports.
• Evaluate security, change, operations, resilience, and monitoring controls; assess the end-to-end cyber control environment, benchmark maturity against standards, and report gaps and risks.
• Review cloud and SaaS services for secure configuration, resilience, and vendor governance, using independent assurance to validate management's remediation.
• Apply data analytics for population testing and anomaly detection, develop repeatable scripts to increase coverage, report issues with clear severity, and track remediation while updating the IT risk assessment.
• Produce concise, risk-rated reports detailing root causes, quantified impacts, and actionable plans with process owners and due dates; coordinate with external auditors on IT control reliance, evidence requests, and walkthroughs to minimize duplication.
• Partner with IT and Finance to implement pragmatic remediation and enhance control design, while continuously improving audit methodology, workpapers, templates, analytics libraries, and GRC workflows.

This list is not exhaustive and may be added to or amended from time to time.

What we're looking for

• Bachelor's degree in IT, Computer Science, Information Systems, Business (or equivalent professional experience).
• CISA certified - Essential.
• Minimum 5 years' experience, with at least 3 years in IT audit, IT risk, IT compliance (or equivalent).
• Hands-on SOX 404 / ICFR experience.
• Experience in large public companies, pre-IPO environments, or consulting firms supporting complex, high-impact projects - Desirable.
• Strong analytical, communication, and report-writing skills.

Why Join EG Group

• Performance Based Bonus Scheme
• Flexible working hours
• Access to Apprenticeships and accredited qualifications
• Career development and progression opportunities within a global organization.
• ASDA Discount Card - 15% off all ASDA stores
• Free Secure Car Parking
• Waterside Café - freshly prepared meals at affordable prices
• Dress Down Fridays
• Prayer and Ablution Facilities
• Work Anniversary Rewards
• Free Eye Test

Who is EG Group?

EG Group is a leading global convenience retailer, operating a wide range of brands across multiple sectors including fuel, foodservice, and grocery retail. With presence in over 7 countries and a commitment to innovation and customer service, EG Group continues to expand its portfolio and reach. Our company is focused on delivering value to its customers, partners, and stakeholders through efficient operations and strategic growth.

Please note – the successful applicant will be subject to a DBS check which will be funded by EG Group.