Senior IT Internal Audit Manager

Lorien; City of Edinburgh; Hybrid; GBP 99,000 - 121,000; Full time

Benefits offered by this job

Private medical cover

Excellent pension

Life assurance

Career breaks

Income protection

Enhanced parental and carers leave

3 volunteering days

And more

Job summary

Lorien in the United Kingdom is seeking a Senior IT Audit Manager to lead audits end‑to‑end across cyber security, resilience and data governance. You will manage an extended audit team, prioritise multiple IT audits and partner with senior stakeholders to drive remediation and risk reduction.

This is a hands‑on leadership role within a growing Internal Audit function. The position emphasizes deep cyber security knowledge, CBEST remediation work, and a track record of owning audit deliverables

Qualifications

• CISA as minimum certification for this role.
• In‑house internal audit experience is essential.
• End‑to‑end audit leadership across cyber security and data governance.

Responsibilities

• Take the lead on audit delivery end to end—from scoping to reporting and remediation.
• Develop and coach an audit team of around 10, ensuring quality and delivery.
• Prioritise a portfolio of IT audits and ad‑hoc projects, resolving resource conflicts.
• Provide assurance over cyber security controls, including patching and scans.
• Deliver coverage across operational resilience, AI governance and data governance.
• Engage senior stakeholders at CTO/CISO level with evidence‑led challenge.

Skills

Leadership

Audit management

Stakeholder influence

Cyber security knowledge

Education

CISA

CISM/CISSP or AIAA desirable

Job description

Location: Edinburgh, Birmingham or London — hybrid, minimum 2 days/week in the office.

Salary: Up to £110,000 depending on experience, plus an indicative bonus range of 30-60%

Benefits:

• Private medical cover
• excellent pension
• life assurance
• career breaks
• income protection
• enhanced parental and carers leave
• 3 volunteering days
• and more

About the role

A leading UK financial services organisation is hiring a Senior IT Audit Manager into a genuine leadership position within a growing Internal Audit function at a pivotal point in its development. The function is market-leading and award-winning, led by a Chief Auditor and leadership team with a strong external reputation, and continues to pursue further industry recognition. The Head of Internal Audit for IT Change and Resilience joined the business this year and is actively shaping the team’s capability, structure and control environment — against a backdrop of real growth, including a recent acquisition that has expanded the business’s scale and complexity. This role carries leadership responsibility across an extended audit team of around 10, with genuine scope to grow further as the function scales.

This is an end-to-end, in-house audit role rather than a programme of repeatable, templated reviews. You will take the lead on audits — hands‑on, on the ground, managing audit projects from scoping through to reporting and remediation tracking — across cyber security, operational resilience, AI governance and data governance, with each audit shaped by the specific risk in front of you. Cyber risk is a firm‑wide priority at present, including remediation work tied to a Bank of England‑mandated CBEST penetration test, so deep cyber security knowledge — including patch management and vulnerability scanning — is essential.

What you’ll do

• Take the lead on audit delivery, managing audit projects end to end — scoping, fieldwork, reporting and remediation tracking
• Lead and develop an extended audit team of around 10, setting direction, coaching capability and owning quality and delivery
• Lead and prioritise a portfolio of IT audits and ad‑hoc projects, resolving resource conflicts and keeping delivery on track
• Provide assurance over cyber security control effectiveness, including patch management, vulnerability scanning, and CBEST penetration testing findings and remediation
• Deliver full‑scope audit coverage across operational resilience, AI governance and data governance, including coverage as the business integrates recent acquisitions
• Build trust with senior technology stakeholders through evidence‑led challenge, holding your own at a senior/executive level
• Partner with senior audit leadership to implement modern audit methods, including AI, and bring best practice into a growing function

What you’ll bring

• CISA as a minimum; CISM, CISSP or AIAA desirable, with relevant post‑qualification experience
• In‑house internal audit experience is essential — candidates from a predominantly external/advisory audit background are unlikely to be a fit for the depth of ownership this role requires
• A genuine track record taking the lead on audits and managing audit projects on the ground — through formal line management, project/engagement leadership, or both
• Demonstrable end‑to‑end experience across cyber security, data governance and AI audit specifically
• Deep cyber security knowledge, including patch management and vulnerability scanning audit experience, ideally with exposure to penetration testing frameworks and regulatory‑driven remediation (e.g. CBEST or equivalent)
• Proven senior stakeholder influencing skills at CTO, CISO and -1 level
• Familiarity with key UK technology risk regulations
• Experience auditing outsourced processes and technical platforms (Microsoft Windows, Azure, AWS)

What’s in it for you

• Join a market‑leading, award‑winning Internal Audit function with a strong external reputation
• Genuine growth trajectory, including exposure to M&A integration audit work following a recent acquisition
• Real leadership scope in a function that’s actively being built out