Technology Risk Services Manager – Hybrid (London)

Grant Thornton UK; Greater London; Hybrid; GBP 85,000 - 110,000; Full time

Benefits offered by this job

Flexible working

Hybrid working

Job summary

Grant Thornton UK seeks a Technology Internal Audit Manager in London with hybrid working. You will lead cyber and information security internal audits and manage client relationships, delivering reports that align with Grant Thornton methodologies.

The role requires professional security qualifications (CISA, CISM, CISP) and experience across governance, GDPR, and technical controls. You will plan with clients, supervise staff, and contribute to the growth of TRS within BRS.

Qualifications

• Professional qualification (CISA, CISM, CISP, or similar) with post qualification experience.
• Experience scoping, delivering, and reporting on cyber and information security internal audits.
• Experience in assessing technical security controls (firewalls, cloud configs, networks).
• Familiar with cyber security testing, governance, and third‑party assurance.
• Strong interviewing, analysis, and client reporting skills.
• Knowledge of frameworks (NIST, CIS, Cyber Essentials, GDPR).
• Security certifications (CISSP/CISM) desirable.
• Experience with GDPR and data protection controls.

Responsibilities

• Take ownership and lead on allocated assignments, developing staff.
• Deliver cyber and information security internal audit engagements for clients.
• Lead planning conversations and draft audit terms of reference.
• Conduct fieldwork per Grant Thornton methodologies with appropriate testing.
• Hold close‑out meetings, write reports summarising observations.
• Assist with financial management of client relationships (WIP, invoices, budgets).

Skills

Cybersecurity audits

Internal audit management

Risk governance

Client relationship management

Report writing

Education

CISA

CISM

CISSP (desirable)

Tools

Audit software

Microsoft Office

Job description

Grant Thornton UK seeks a Technology Internal Audit Manager in London with hybrid working. You will lead cyber and information security internal audits and manage client relationships, delivering reports that align with Grant Thornton methodologies.

The role requires professional security qualifications (CISA, CISM, CISP) and experience across governance, GDPR, and technical controls. You will plan with clients, supervise staff, and contribute to the growth of TRS within BRS.