Senior Auditor, Infrastructure & Cyber Security

NatWest Group; City of Edinburgh; On-site; GBP 200,000 +; Full time

Job summary

A financial services company in Edinburgh seeks a Senior Auditor for Infrastructure and Cyber Security. You will assess risks, produce audit reports, and engage with stakeholders to enhance control. The ideal candidate has experience in audit or risk management and a strong understanding of Cyber Security principles. This role offers a dynamic environment focused on continuous improvement in risk management.

Qualifications

• In depth knowledge of Infrastructure and Cyber Security risks and technologies.
• Experience auditing server infrastructure platforms.
• Ability to produce effective audit engagement reports.

Responsibilities

• Assessing Infrastructure and Cyber Security risks and controls.
• Reviewing risk information to identify key business risks.
• Producing audit reports to influence managers.

Skills

Audit or risk management experience

Understanding of Infrastructure and Cyber Security risks

Excellent analytical skills

Stakeholder management skills

Communication skills

Job description

Join us as a Senior Auditor in Infrastructure & Cyber Security

What you’ll do

What you’ll do

As a Senior Auditor, we’ll look to you to provide quality, efficient and effective assurance and influence business managers to improve control as part of a digital and data-driven organisation. You’ll be assessing Infrastructure and Cyber Security risks and controls and carrying out testing, as well as contributing to assurance planning and undertaking effective process mapping.

You’ll also be:

• Analysing MI and reviewing risk information to identify key business risks and contribute to continuous monitoring
• Producing effective audit engagement reports and opinions which influence our business managers to ensure they lead in a risk conscious way
• Engaging with stakeholders throughout engagements, making sure they understand business risks by having open and effective conversations on key risks
• Coaching auditors and supporting them to realise their potential on the engagement

The skills you’ll need

The skills you’ll need

We’re looking for someone with audit or risk management experience, together with a strong understanding of the principles of good risk management.

You’ll also need:

• In depth understanding of Infrastructure and Cyber Security risks, concepts, and technologies
• Experience in auditing server infrastructure platforms at OS, Database or Middleware level
• Auditing Public Cloud IaaS/PaaS services running in MZ Azure, AWS or GCP
• Familiarity with the latest cyber security and engineering concepts including defence in depth, cryptography, privileged access management, DevOps, Continuous Integration and Continuous Deployment
• Networking (Device configuration management) and Security
• Excellent analytical skills and the ability to assess and prioritise data effectively, quickly establishing what’s important
• A thorough grounding in monitoring and testing effective controls
• Excellent stakeholder management skills
• Great communication skills, with the ability to translate concepts in a clear and concise way