Senior IT Internal Audit Manager - Hybrid, High Impact

Phoenix Group; City of Edinburgh; Hybrid; GBP 85,000 - 110,000; Full time

Job summary

Standard Life in the UK is seeking a Senior IT Internal Audit Manager. The role offers hybrid working with a minimum two days in the office, and you will lead an portfolio of IT audits aligned to the group’s risk and control framework.

You will manage relationships with a wide range of stakeholders and deliver audits end‑to‑end. You will bring CISA (or equivalent) and extensive experience in IT audit, cyber security, and governance, with a focus on operational resilience and AI risk awareness.

Qualifications

• CISA is required; other qualifications such as CISM, CISSP, or AIAA are desirable.
• Proven senior stakeholder influencing skills at CTO, CISO and other senior levels.
• Leadership and coaching experience.
• Deep experience overseeing a portfolio of technical IT audits.
• Excellent understanding of Operational Resilience, Cyber Security, IT Operations and Data Governance control domains.
• Good awareness of AI and Frontier AI risks.
• Familiarity with key UK regulations in respect of technology risk.
• Experience of auditing outsourced processes.
• Experience of technical platforms – e.g. Microsoft Windows and Azure environments, AWS.
• A general understanding of security tools used in key control areas such as network security, patching, end user device security.

Responsibilities

• Oversee a portfolio of IT audits and competing demands by setting clear priorities, resolving resource conflicts early, and keeping delivery moving smoothly across planning, fieldwork, reporting and action follow‑up.
• Provide support and guidance on IT control matters to business audit colleagues.
• Focus audit work on the risks that matter, aligned to real risk drivers, adjusting scope and timing as required.
• Coach IA Managers and junior colleagues to strengthen issue framing and root‑cause recommendations.
• Build trust with senior stakeholders through evidence‑led challenge and establish credibility and insights across audits to strengthen GIA’s understanding of culture and control.
• Seek to identified cross‑cutting themes that help reframe organisational risk thinking.
• Demonstrate proactive engagement with stakeholders to ensure that emerging issues reach senior stakeholders quickly rather than waiting for end‑of‑audit reporting.
• Partner with the Head of Audit for IT & Change to Implement innovative methods, including the use of AI, and bring best practices into the organisation to develop modern audit techniques.

Skills

CISA

Stakeholder influence

Leadership coaching

IT audits

Operational resilience

Cyber security

Data governance

AI risks

UK regs

Cloud platforms

Education

CISA (minimum)

Tools

Microsoft Windows

Azure

AWS

Job description

Standard Life in the UK is seeking a Senior IT Internal Audit Manager. The role offers hybrid working with a minimum two days in the office, and you will lead an portfolio of IT audits aligned to the group’s risk and control framework.

You will manage relationships with a wide range of stakeholders and deliver audits end‑to‑end. You will bring CISA (or equivalent) and extensive experience in IT audit, cyber security, and governance, with a focus on operational resilience and AI risk awareness.