IT Audit Manager

Job Introduction

The prime objective of the Internal Audit Department is to protect the assets, reputation and sustainability of the organisation. This is accomplished by providing the Board Audit Committee and senior management with an independent and objective assurance over the effectiveness and appropriateness of the processes for governance, risk management and internal control. The IT Audit Manager will be a key contributor in helping further develop and maintain a strong and effective Internal Audit function and will contribute to maintaining a robust audit process for completing IT and Information security audits across the UK bank.

This role is responsible for planning, conducting, documenting and reporting on IT and Information Security audits for Handelsbanken in the UK.

• Conducting risk assessments for both audit assignment planning and for the purposes of preparing and updating the annual audit plan
• Helping produce a risk based internal IT audit plan
• Delivery of the internal IT audit plan to time and quality requirements
• Establishing audit programmes that are practical, effective and efficient to meet audit assignment requirements
• Assisting business audit colleagues with general IT related controls testing in support of integrated audit objectives, aligned to plans for such coverage where required
• Working with business audit colleagues in support of high risk and or regulatory required business change activities and initiatives, primarily providing the IT change and related project assurance input into these where audit coverage is required and aligned to the Bank's Change agenda and supporting IT modernisation plans
• Be able to perform and promote the use of data analytics and seek opportunities to further develop this capability aligned with the Department's analytics strategy and operational requirements
• Communicating results of audits to the Head of Internal Audit, IT and Information Security, and to senior levels of first line management as audit fieldwork and testing is performed and more formally through the audit reporting process
• Help develop and enhance procedures in compliance with the IA methodology and standards and help develop this in respect of IT and information security aspects where necessary, e.g. CIIA topical requirements.
• Provide information inputs, updates and draft reporting for the Head of Internal Audit, IT and Information Security to support reporting requirements the team is required to fulfil.
• Support and execute robust audit follow-up procedures to determine that appropriate corrective action is taken in respect of audit report observations and related risks.

• A detailed practical understanding and application of IT audit methodology and process in a Financial Services context.
• Strong working and technical knowledge of IT, IT Governance, IT Risk Management methods and practices, Information/Cyber Security, Systems Development Life Cycle controls (Waterfall and Agile/Dev Ops aligned), Business systems/applications and IT general controls testing as well as audit work that spans services received from material 3rd party IT providers
• Able to assess risks in a practical manner and develop proportionate controls testing plans aligned to key risk areas
• Strong technical knowledge, understanding and practical application of industry frameworks/good practices, e.g. COBIT, NIST, ISO
  27001/2, ISO
  23001/27031, DORA, ITIL, AI, Agile methods, etc
• Understands and can interpret complex regulatory requirements in areas of responsibility, and as related to the coverage/assurance provided by Internal IT Audit, e.g. CHAPS Payments Scheme, LINK Scheme, Faster Payments, GDPR/DPA requirements, etc
• Prior experience of auditing complex, multi‑year IT modernisation programmes spanning IT infrastructure as well as business systems either developed / configured in house, acquired from 3rd party vendors, including both on premise and Cloud based services
• Have a learning mindset being keen and able to keep up to date with new technology developments, e.g. AI / ML / Data Analytics tools etc, both from the perspective of using these tools within the audit function as well as providing risk based coverage over these emerging areas that the Bank is exploring.
• Strong interpersonal skills with the ability to communicate feedback to all levels of stakeholders, as well as to colleagues within the team
• Ability to work within a team and also be comfortable and confident working alone in areas/audits assigned, with minimal need for supervision to maintain efficiencies within a small team
• Analytical skills with strong attention to detail and associated accuracy/quality in work performed
• High quality report writing skills backed up with well maintained/robust audit files in accordance with Internal Auditing standards.

Handelsbanken is a relationship bank with a decentralised way of working, a strong local presence thanks to a nationwide network of branches, and a long-term…