Senior IT Auditor

ALF Recruit; Lancashire; Hybrid; GBP 60,000 - 70,000; Full time

Benefits offered by this job

Free parking

Hybrid work pattern (1 in-office day/2

Flexible hours

Career development support

Job summary

ALF Financial Services is recruiting a Senior IT Auditor to own IT audit across a fast-growing fintech group in the North West. You’ll report to the Head of Internal Audit and present findings to the audit committee, with cyber security and cloud controls at the forefront.

You will plan and deliver risk-based audits, assess ITGCs and third-party risk, and contribute to a developing audit plan. A CISA qualification or progress toward it is preferred, with flexible hours and a single in-office day

Qualifications

• Solid IT audit, IT risk or technology assurance experience.
• CISA qualified or working towards it.
• Strong grounding in ITGCs, cyber security controls and cloud.
• Familiarity with NIST, ISO 27001 or COBIT.
• Ability to challenge technical people constructively and land findings.
• Comfortable working autonomously and owning audits end to end.

Responsibilities

• Plan, scope and deliver risk-based IT audits across the full group.
• Assess IT general controls, application controls and cyber security controls.
• Audit cloud environments, third-party and vendor risk, data governance.
• Translate technical findings into clear business risk for senior stakeholders.
• Present audits to the audit committee and drive remediation.
• Contribute to the annual audit plan and close findings.

Skills

IT audit experience

CISA in progress

ITGCs & cyber controls

NIST/ISO27001/COBIT

Autonomous auditing

Audit delivery ownership

Education

CISA certification

Tools

NIST

ISO 27001

COBIT

Job description

ALF Financial Services have been retained exclusively to recruit a Senior IT Auditor for a fast-growing fintech group operating across multiple businesses in the North West.

'

• £60,000 - £70,000
• One day a fortnight in the office. That is not a typo
• Ultra flexible hours, judged on delivery rather than time at a desk
• Free parking when you are in
• Direct audit committee exposure, presenting your own technical audits
• A structured career and development plan built around a proper gap analysis, with qualifications supported
• Full ownership of IT audit across an expanding multi-business group

This is the technology assurance role in the group. You will own IT audit outright across every business in the portfolio, reporting to the Head of Internal Audit and taking your own findings straight to the audit committee. Cyber is the board's number one priority, and this position exists because they want that capability in-house rather than bought in. The breadth is unusual: multiple operating businesses, all expanding, all in scope.

'

• Planning, scoping and delivering risk-based IT audits across the full group
• Assessing IT general controls, application controls and cyber security controls across key systems
• Auditing cloud environments, third-party and vendor risk, data governance and emerging technology including AI
• Translating technical findings into clear commercial risk for senior stakeholders
• Presenting your own audits to the audit committee and agreeing practical remediation
• Contributing to the annual audit plan and tracking findings through to closure

'

• Solid IT audit, IT risk or technology assurance experience, in-house or in practice
• CISA qualified or working towards it
• Strong grounding in ITGCs, cyber security controls and cloud
• Familiarity with NIST, and ideally ISO 27001 or COBIT
• Someone who can challenge technical people constructively and land findings without friction
• Comfortable working autonomously and owning their own audits end to end

This is the rare role that gives you the autonomy of a standalone remit, the profile of audit committee exposure and the flexibility most employers have quietly withdrawn.