IT Audit Manager

Job Description

The IT Audit Manager is Audit, Regulatory and Certification Management lead for the Technology Services Department (e.g. COBiT, ITIL, COSO, CISA etc) to provide direction for the performance and delivery of the Audit Plan, Regulatory standards and the Policies.This includes:

• Internal and External audit liaison, including statutory audit and other external assurance activities, as well as regulatory engagement
• Supervising, coordinating, and managing the impact of new and changing regulatory obligations on the IT risk and control framework
• Managing the day-to-day relationship with Group Risk and Compliance.

The key responsibilities of the role are:

• Facilitating Internal and External Audit coverage to ensure their audit is plan is delivered whilst minimising disruption to Technology Leads.
• Ensuring that audit reports are accurate, and actions agreed with control owners are delivered in full to timescale
• Ensure all audit and regulatory requirements are met and have appropriate internal ownership.
• Support Group Risk in their assessment of the effectiveness of key controls
• Undertake reviews of key projects to ensure that appropriate controls are deployed, assess the overall impact on risk management framework and confirm that forecast benefits are realised.
• Plan and perform application and general systems control audits, control process reviews and system development reviews.
• Assess the design and operational effectiveness of Key Risk Indicators (KRIs) and IT General Controls (ITGCs).
• Provide guidance on KRI/ITGC testing methodology, validation processes, procedures, adherence to policy and documentation.
• Undertake reviews as requested by the Chief Technology Officer.
• On an annual basis provide a briefing on the IT control framework to the Non-Executives and the Executive Management Board.
• Provide strategic input into business planning to ensure that risk and control gaps are a key consideration.
• Provide guidance to the Commercial Team on Cyber Security and IT control due diligence assessments received.
• Work closely with other teams (Risk, Operational Resilience, Information Security, etc.) to report, track and follow up on remediation plans.

Competence, knowledge and skillsCompetence

• Knowledge of IS/IT control frameworks, specialised standards, and leading practices including professional qualifications and certifications (e.g. COBiT, ITIL, COSO, CISA etc) or working towards qualification
• Strong knowledge of Operational Risk and / or IT auditing

Knowledge & Skills

• Proven track record in leading regulatory, risk or control teams across any of the three lines of defence model
• Proven experience of engaging and interacting with Internal and External Audit and other external assurance providers
• Knowledge and experience of identifying and understanding regulatory requirements
• Strong record in identifying root causes and developing efficient and effective solutions to address them in a clearly articulated manner
• Deep understanding of application and technology control design, IT risk and control frameworks and industry good practice
• Related working experience in Financial Services or the Ecommerce sector
• Experience in presenting complex issues confidently and concisely to Technology Senior Managers and other key stakeholders using non-technical easily understood language
• Self-motivated, professional, tenacious and enthusiastic
• Open personality with effective written and verbal communication skills
• Strong ownership of tasks, attention to detail and following through to conclusion
• Excellent attention to detail

About Us:AJ Bell is one of the largest providers of online investment platforms and stockbroker services in the UK, with assets under administration exceeding £65.2 billion and more than 346,700 clients. Our award winning products include Self-Invested Personal Pensions(SIPP), ISAs and Dealing Accounts.In return you can expect:

• Competitive salary
• Excellent career opportunities
• 26 days holiday increasing to 30 days with length of service, plus bank holidays
• Discretionary bonus
• Contributory pension scheme
• Holiday buy/sell scheme
• Season ticket loan
• Free social events including monthly pay-day Friday drinks
• Free gym and classes
• Volunteering days
• + much, much more!