IT Audit Manager

Location: Greater London

## IT Audit Manager Apply locations:
UK-London time type:
Full time posted on:
Posted Todaytime left to apply:
End Date:
August 5, 2026 (13 days left to apply) job requisition :
R004229IT Audit Manager
** Shift Pattern:
** Standard 40 Hour Week (United Kingdom)
** Scheduled Weekly

Hours:

** 40
* * Corporate Grade:
** D - Assistant Vice President
** Reporting Line:**(UK Division) Corporate
*
* Location:

** UK-London
** Worker Type:
** Permanent The London Metals Exchange (LME) is the largest metal exchange in the world and is a wholly owned subsidiary of Hong Kong Exchanges and Clearing Limited (HKEX), one of the world’s largest publicly listed securities exchanges.

LME Clear (LMEC) provides clearing services to all LME’s clearing participants. LMEC launched in September 2014.The IT Audit Manager will report into and be responsible for working with the LME Senior IT Audit Manager in the execution of the annual internal audit plan, as well as contributing to the assessments of risks within the IT and related functions. The IT Audit Manager will have regular liaison with HKEX Group Internal Audit (GIA), especially regarding IT audit work, as LME Internal Audit forms part of GIA.Responsibilities:

The IT Audit Manager, reports to the LME Senior IT Audit Manager, and is the Manager-in-Charge to conduct IT audits in accordance with the annual audit plan. This role also supports and contributes to departmental initiatives. The detailed responsibilities of the role include:
* Independently manage and lead IT audits from planning risk-based audit scope, through fieldwork execution, to reporting in accordance with GIA’s audit methodology, to ensure audits are run effectively and key issues are identified and reported.
* Demonstrate ability to critically assess processes and develop testing strategies to evaluate design and effectiveness of key controls. Independently articulate potential control gaps and risk exposures to stakeholders.
* Leverage innovation/ automation audit techniques to increase effectiveness and efficiency of the audit program.
* Independently conduct continuous risk monitoring and assessments of the IT operations to identify emerging / high-risk areas for coverage.
* Manage stakeholder relationships and proactively provide risk and control advice with an aim to improve the Group’s control environment. Challenge and influence management to implement effective controls.
* Develop sound knowledge of the Group’s strategy, products, risk management processes and operating platforms. Consider broader enterprise risks and LME’s strategic objectives.
* Stay current with the industry development, business and IT trends. Conduct research on industry and risk topics to increase effectiveness of audit coverage and Internal Audit’s ability to add value to the LME Group.
* Engage in ad-hoc audit activities such as review of key firmwide change initiatives and regulatory requests.
* Validate remediation of audit issues in an effective and timely manner.
* Participate and contribute to departmental initiatives such as continuous improvement of GIA’s audit methodology.
* Support the preparation of materials for senior management, Audit Committee and regulators.
** Academic and Professional Qualifications

Required:

*** University degree, preferably in Information Systems or other related subject
* Relevant professional qualifications, such as Certified Information Systems Auditor (CISA) or Certified Information Systems Security Professional (CISSP) or Certified Internal Auditor (CIA), etc preferred.
** Required Knowledge and Level of

Experience:

*** At least 3 to 10 years of work experience in internal or external audit, risk management, compliance, cybersecurity, preferably with professional firms or financial institutions. Other relevant expertise will also be considered
* Strong understanding of industry cybersecurity standards such as National Institute of Standards and Technology (NIST) Cybersecurity Framework, ISO 27001, CIS, etc.
* Strong understanding of the underlying IT risks, application controls, assessment practices and various IT security software, operating systems, databases, telecommunication and networking technologies.
**…