Technology Audit Manager

BBC UK; Greater London; Hybrid; GBP 70,000 - 85,000; Full time

Job summary

A leading media organization is seeking an Audit Manager to join their Audit and Assurance team. In this role, you will conduct audits aimed at influencing change and managing significant risks within the organization. Candidates should have strong qualifications, proven experience in technology audits, and expertise in regulatory compliance. The position offers a competitive salary ranging from £70,000 to £85,000 with a hybrid working model based in London or Birmingham.

Benefits

25 days annual leave

Flexible working hours

Competitive salary package

Qualifications

• Full professional qualifications in accountancy, internal auditing, or related fields.
• Proven experience in delivering complex technology audits in large organizations.
• Strong understanding of regulatory compliance frameworks.

Responsibilities

• Lead the delivery of a portfolio of audit assignments.
• Conduct audits across various technology domains.
• Provide expert advice on IT risk and control matters.

Skills

IT risk management

Cybersecurity frameworks

Stakeholder influence

Digital transformation

Education

Chartered Accountancy qualifications

Certified Information Systems Auditor (CISA)

Certified Information Security Manager certification (CISM)

Qualified Accountant through a recognized professional body

Job description

Job Details

Job Requisition ID: 33847

Job Closing Date: 7 December 2025

Location: Birmingham, GBR, B1 1AY | London, GBR, W1A 1AA

Department: Audit & Assurance, Quality Risk and Assurance, BBC Chief Operating Group

JOB BAND: E

CONTRACT TYPE: Permanent, Full-time.

In-house Title: Audit Manager

LOCATION: London or Birmingham. Hybrid working with a minimum requirement of two days per week in the office (please note this is the current requirement, and may change in future)

PROPOSED SALARY RANGE: £70,000 - £85,000 (plus LW £5,441pa if London based) depending on relevant skills, knowledge and experience. The expected salary range for this role reflects internal benchmarking and external market insights.

We're happy to discuss flexible working. If you'd like to, please indicate your preference in the application - though there's no obligation to do so now. Flexible working will be part of the discussion at offer stage.

Purpose of the Role

Join our high-performing Audit and Assurance team at the heart of the BBC. We deliver impactful audits that shape the organisation and focus on the BBC's most significant risks. Highly regarded across the Group, our work drives strategic decisions and supports continuous improvement. If you're passionate about making a difference, influencing change, and working where your insights matter, this is your opportunity to be part of a team that truly makes an impact.

Why Join the Team

Do you want to join a team where your work truly makes a difference? At the BBC, our Audit and Assurance team thrives on a great team culture, where collaboration, support, and innovation are at the core. No two days are the same as we tackle the BBC's biggest risks and help shape its future. It's a fantastic place to work—diverse, dynamic, and driven by purpose-within a world-renowned organisation that values integrity, impact, and continuous improvement.

Your Key Responsibilities and Impact

• Take a primary role in the timely delivery of a portfolio of audit assignments, to be carried out using a team of internal Senior Auditor resource and resource provided through the co-source internal audit providers; and take ownership of audit delivery from planning, through fieldwork to reporting, and obtaining buy-in from key stakeholders.
• Conduct audits across a wide range of technology domains including products, cybersecurity, cloud computing, data privacy, IT governance, infrastructure, and application controls.
• Negotiate with, and influence, senior management in the development of appropriate controls responses.
• Provide expert advice and challenge to senior technology and business stakeholders on IT risk, control, and compliance matters. Stay abreast of emerging technologies, digital transformation initiatives, and evolving cyber threats to inform audit planning and execution.
• Contribute to the development and continuous improvement of audit methodologies, tools, and data analytics capabilities. Promote a culture of innovation, integrity, and continuous improvement within the audit function, to identify opportunities to digitise and streamline audit processes.
• Maintain knowledge of the BBC strategy, external and organisational risk environment and business changes to help inform audit approach and activity.

Your Skills and Experience

We are looking for the ability and assurance to deliver a range of audit activity under high quality standards and demanding deadlines in a complex environment, as well as:

Essential Criteria

• Successful applicants will be fully qualified with at least one of the following professional qualifications, with a preference for Chartered Accountancy qualifications:
  • Qualified Accountant through a recognised professional body (e.g. CA, ACA, ACCA, ACMA)
  • Chartered Member of the Institute of Internal Auditors (UK)
  • Certified Information Systems Auditor (CISA), Certified Information Security Manager certification (CISM), Certified Information Systems Security Professional (CISSP) or equivalent.
• Proven experience in leading and delivering complex technology audits in a large, multifaceted organisation, and demonstrable ability to influence and collaborate with senior technology leaders and stakeholders.
• Strong understanding of IT risk management, cybersecurity frameworks (e.g., NIST, CAF, ISO 27001), and regulatory compliance (e.g., GDPR, SOX, EU AI Act).
• Experience leading or contributing to digital transformation initiatives within internal audit, including the design and implementation of innovative audit techniques, agile auditing, and the use of emerging technologies to enhance assurance delivery.
• Ability to negotiate and work alongside a range of contacts including senior management and the motivation and energy to actively promote control improvements.

Desired but Not Required

• It would be a significant advantage to have additional, substantial experience in one or more of the following areas:
  • Cybersecurity and information security audits
  • Cloud and infrastructure audits
  • Data analytics and automation in audit
  • Agile and DevOps environments
  • Digital transformation and emerging technologies
  • IT risk and control frameworks (e.g., COBIT, ITIL)
  • Data Analytics;
  • Internal Consulting;
  • IT Audit;
  • Project Audit;
  • Media related industry experience

If you can bring some of these skills and experiences, along with transferable strengths, we'd love to hear from you and encourage you to apply.

Before your start date, you may need to disclose any unspent convictions or police charges, in line with our Contracts of Employment policy. This allows us to discuss any support you may need and assess any risks. Failure to disclose may result in the withdrawal of your offer.

Disclaimer

This job description is a written statement of the essential characteristics of the job, with its principal accountabilities, incorporating a note of the skills, knowledge and experience required for a satisfactory level of performance. This is not intended to be a complete, detailed account of all aspects of the duties involved.

Please note: If you were to be offered this role, the BBC will conduct Employment screening checks which include Reference checks; Eligibility to work checks; and if applicable to the role, Safeguarding and Adverse media/Social media checks. Any offer made is conditional on these checks being satisfactory.

For any general queries, please contact: [e-mail]

Redeployment

The BBC is committed to redeploying employees seeking suitable alternative employment within the BBC and they will be given priority consideration ahead of other applicants. Priority consideration means for those employees seeking redeployment their application will be considered alongside anyone else at risk of redundancy, prior to any individuals being considered who are not at risk.

Information at a Glance

This is your BBC

At the BBC you can create and innovate in an inclusive environment while contributing to some of the world's best loved content, and the BBC's mission to inform, educate and entertain.

Find out more about the BBC

Life at BBC

Here you will benefit from:

• Fair pay and flexible benefits including a competitive salary package, a flexible 35-hour working week, 25 days annual leave with the option to buy an extra 5 days, a defined pension scheme and discounted dental, health care and gym.
• Excellent career and professional development.
• Support in your working life, including flexible working which you can discuss with us at any point during the application, selection or offer.
• A values-based organisation where the way we do things is important as what we do.

Benefits may vary if you are joining on an FTC basis or on an orchestra conditions contract.

Learn more about life at the BBC and our values in our candidate pack.

Candidate pack

You belong

We have a working environment where we value and respect every individual's unique contribution, so all our employees feel that they can belong, thrive and achieve their full potential.

We want to attract the broadest range of talented people to join us. The more diverse our workforce, the better able we are to respond to and reflect our audiences in all their diversity.

We welcome applications from individuals, regardless of age, gender, ethnicity, disability, sexual orientation, gender identity, socio-economic background, religion and/or belief.

Find out more about diversity, inclusion and belonging in our strategy below.

Diversity, inclusion & belonging strategy

Disability confident

We are a disability confident employer. If you need to discuss adjustments or access requirements for the interview process, or to carry out this role, please contact us via email and we'd be happy to discuss: [e-mail]