IT Internal Audit & Controls Manager/Senior Manager

About the Role

This is a key, highly visible management role within the Internal Audit and Controls function/ Senior Manager (depending on experience). You will play a pivotal role in shaping and strengthening S4Capital’s governance, risk management, internal audit delivery, and IT control framework. 

Reporting to and working closely with the Head of Internal Audit and Controls, you will take full responsibility for designing and implementing methodologies aligned with IIA Standards, setting and leading the IT audit plan, and managing the end-to-end delivery of audits, targeted reviews, and deep dives.  You will be a trusted advisor to senior leadership, including the Head of IT and the Chief Information Security Officer.

Responsibilities:

• Methodology & Strategic Planning: In conjunction with the Head of Internal Audit and Controls, design and implement an internal audit and controls methodology aligned with Institute of Internal Auditors (IIA) Standards, and lead the development of the IT internal audit and controls team plan.
• Audit & Review Delivery: Manage the end-to-end delivery of IT audits, reviews, and targeted "deep dives" into entities and/or key business processes to time, cost, and quality (from planning through fieldwork to reporting), obtaining key stakeholder buy-in.
• Control Framework & Monitoring: Ensure the group operates a fit-for-purpose IT control framework by designing and delivering an ongoing quality review and controls monitoring programme.
• Business Advisory & Integration: Act as a trusted business partner and advisor on IT risk and controls. 
• Reporting & Issue Remediation: Draft high-quality reports that clearly articulate issues, business impact, and SMART action plans. Oversee and track the completion and remediation status of control issues and audit findings identified through both internal and external audits.
• Continuous Improvement & Innovation: Drive continuous improvement in the company's control environment through technology, data analytics, and risk awareness, fostering a business culture that seeks ongoing enhancement in risk management and control effectiveness.
• Stakeholder Engagement & Culture: Build and maintain an effective stakeholder network across the organisation, contributing to a collaborative, professional work environment that encourages learning, innovation, and career development.
• Best Practice & Compliance: Maintain up-to-date knowledge of IT audit best practice and regulatory requirements.

About You

The essentials:

• IT Audit (CISA) or IT Security (CISM, CISSP) qualifications with 8+ years of experience. 
• Pragmatic attitude and can adapt quickly to a changing environment.
• Previous professional experience of working in complex, international organisations is highly desirable.
• Technical expertise and knowledge of professional internal audit practices, governance, risk management and internal controls, with a strong track record of relevant audit experience.
• Strong written and verbal communication skills with a demonstrable ability to summarise and explain technical issues and solutions for a non-technical audience.
• Has an advanced understanding of IT general controls (e.g. security, change management, disaster recovery, backup, data centre, infrastructure, etc.), including proper design and implementation.
• Possesses strong core IT audit skills and understands up-to-date IT auditing methodologies and concepts.
• Ability to build up an understanding of the Group’s IT at pace as a basis for supporting an effective IT risk management process. 
• Familiarity with AI tools and frameworks to govern their usage would be desirable.
• Excellent interpersonal and communication skills and can flex style and approach to a variety of different people and situations

#LI-RE1 #LI-Hybrid