Senior Internal Auditor - IT

Sizewell C Company; Manchester; Hybrid; GBP 70,000 - 77,000; Full time

Benefits offered by this job

Up to 5% annual bonus

28 days' annual leave + bank holidays

Extra holiday purchase option

Defined Contribution Pension Scheme (7

Access to benefits portal for health,

Job summary

Sizewell C is seeking a Senior Internal Auditor, IT to join our growing Internal Audit team. You’ll lead technology-focused audits, assess cyber security and governance, and report findings to senior stakeholders across a major UK infrastructure project.

You’ll combine IT audit and technology risk experience, drive improvements in governance and risk management, and work with diverse teams to strengthen assurance across digital environments.

Qualifications

• Experience in IT audit, technology risk or assurance in regulated environments.
• Ability to lead or deliver IT internal audit engagements from planning to reporting.
• Knowledge of cyber security governance, technology risk and assurance frameworks.

Responsibilities

• Plan, lead and deliver IT internal audit engagements from initial scoping through to reporting.
• Assess IT governance, cyber security, information security and technology risk management arrangements.
• Test IT General Controls including access, change and incident management and third-party controls.
• Conduct interviews, gather evidence and evaluate key controls for findings.
• Prepare audit documentation, findings and reports of high quality.
• Develop practical recommendations to strengthen governance, risk management and controls.
• Collaborate with stakeholders to agree actions and track implementation.
• Support audit planning and contribute to Internal Audit Plan development.
• Build relationships across the business while maintaining independence and objectivity.
• Coordinate with co-source providers and other assurance teams to improve coverage.

Skills

IT Audit

Technology Risk

Stakeholder Management

Audit Engagements

Cyber Security Governance

Communication Skills

Education

CISA

CIA

ACA

ACCA

CPA

CA

Tools

Microsoft Azure

Microsoft 365

SAP

OT Environments

Data Analytics Tools

Job description

Sizewell C's business is to design, finance, construct, commission, operate, maintain, and eventually decommission the nuclear power plant and related infrastructure at Sizewell C in Suffolk. Overall, whilst the Company is in the construction phase, the Boards' principal focus is on the development and construction of Sizewell C on time, on budget and to the highest quality and safety standards. The Company is maturing to meet all these requirements.

Sizewell C is economically regulated by OFGEM under the RAB model similar to other UK electricity distribution networks and Thames Tideway.

Sizewell C construction strategy is to replicate the design of Hinkley Point C, using the majority of the same supply chain, but innovating in the way it is delivered to achieve savings in time and cost of around 20%. The CCO will need to be guided by and incorporate lessons learned from the Hinkley Point C commercial delivery to achieve Sizewell C's ambition.

Following Financial Completion and Revenue Commencement, Sizewell C is fully funded and is owned by; The Secretary of State for Energy Security and Net Zero representing HM Government, La Caisse, Centrica, EDF and Amber Infrastructure.

Senior Internal Auditor, IT

Location: Manchester or London, with hybrid working and attendance in the office 2 to 3 days per week. Travel between Manchester and London will be required as and when needed.

Contract: Permanent, full-time.

Salary: £70,000 to £77,000 per annum, depending on experience + bonus + benefits.

Benefits include:

• Up to 5% annual bonus.
• 28 days' annual leave, increasing to 30 days after five years of service, plus bank holidays.
• Opportunity to purchase extra holiday.
• Defined Contribution Pension Scheme with up to 7.5% employee contribution and 15% employer contribution.
• Access to benefits portal offering a range of health, financial wellbeing and lifestyle options.

Closing Date: Wednesday the 7th of October 2026

The Opportunity

We're looking for a talented Senior Internal Auditor, IT to join our growing Internal Audit team and play a key role in providing independent assurance across technology, cyber security, digital transformation and operational technology risks across Sizewell C.

This is an excellent opportunity for an IT Auditor or Technology Risk professional who enjoys understanding how organisations manage technology risk, assessing whether controls are operating effectively, and providing valuable assurance and insight to the business. The role sits firmly within audit, risk and assurance rather than hands‑on technical IT delivery.

You’ll lead and deliver technology-focused audit engagements, evaluate cyber and technology controls, engage with senior stakeholders, and help strengthen governance, risk management and internal controls across one of the UK’s most significant infrastructure projects.

Why Join as a Senior Internal Auditor, IT?

This is a fantastic opportunity for someone who has built a solid foundation in IT Audit, Technology Risk or Assurance and is looking to take on broader ownership of audits and stakeholder engagement.

You’ll have the opportunity to lead audit engagements from planning through to reporting, assess cyber security and technology controls, influence improvements to governance and risk management, and work directly with senior stakeholders across the business. You’ll also gain exposure to major infrastructure delivery, emerging technologies, digital transformation and operational technology environments.

For someone looking to deepen their expertise in technology assurance while developing their career within a supportive and growing Internal Audit function, this is an exceptional opportunity.

What You’ll Be Doing

As Senior Internal Auditor, IT, you will:

• Plan, lead and deliver IT internal audit engagements from initial scoping through to reporting.
• Assess the effectiveness of IT governance, cyber security, information security and technology risk management arrangements.
• Test IT General Controls including access management, change management, incident management and third-party technology controls.
• Conduct interviews, gather evidence and evaluate the effectiveness of key controls.
• Prepare high‑quality audit documentation, findings and reports.
• Develop practical recommendations that strengthen governance, risk management and control frameworks.
• Work with stakeholders to agree actions and track implementation progress.
• Support audit planning activities and contribute to the ongoing development of the Internal Audit Plan.
• Build strong relationships across the business while maintaining independence and objectivity.
• Collaborate with co‑source providers and other assurance teams to improve overall assurance coverage.

What We’re Looking For

The hiring team is particularly interested in candidates who offer a combination of both IT Audit and Internal Audit experience. This could be someone who started in technology audit and gained broader internal audit experience, or someone from internal audit who has developed strong technology risk expertise. Having exposure to both is essential.

You’ll ideally bring:

• Strong recent experience within IT Audit, Technology Risk, Assurance or Controls.
• Experience delivering or leading audit engagements.
• Internal audit experience combined with technology audit or technology risk exposure.
• Experience testing IT controls and evaluating governance frameworks.
• Knowledge of cyber security governance, technology risk and assurance.
• Strong audit report writing and stakeholder management skills.
• Experience operating within a large, complex or regulated environment.
• Strong communication skills and the confidence to hold constructive and sometimes challenging conversations.
• A professional, personable and collaborative approach.

Candidates must be professionally qualified or actively working towards a relevant qualification, such as:

• CISA
• CIA
• ACA
• ACCA
• CPA
• CA

A degree in a relevant discipline such as Business, IT, or Project Management or similar would be advantageous but is not essential.

Desirable, but not essential:

• Nuclear
• Energy
• Utilities
• Infrastructure
• Major construction projects
• FTSE 250 companies
• Other highly regulated industries

Experience with Microsoft Azure, Microsoft 365, SAP, operational technology environments or data analytics would also be advantageous.

Ready to Make an Impact?

When joining Sizewell C, you may wonder why you are contacted by colleagues with an EDF email or see the EDF logo on portals that you access and/or documentation you receive; this is because we have partnered with EDF for the provision of a number of support services whilst we complete a successful transition out of the EDF group.

At Sizewell C we encourage and embrace diversity and how it can improve our experience and performance at work. It is a requirement that those who join us have the right to work in the UK. Whilst sponsorship may be a possibility that we can explore, we are fully committed to local recruitment where possible, and those already holding the right to work in the UK.

To be appointed to this role, you will need to meet the criteria for Security Vetting, which will, ordinarily, require you to have been a resident of the UK for at least three of the past five years.