IT Audit Specialist

IT Audit Specialist

Contract type: Permanent
Location: London or Newcastle offices. The new working model includes time at the assigned office, client sites across the UK as required, and working from home. A minimum of two in‑person days per week are required at NAO or client offices.
Salary: £61,000 p.a. (Newcastle) – £67,000 p.a. (London) plus Civil Service Pension. A higher base salary may be available for an exceptional candidate.

• UK nationals
• Nationals of Commonwealth countries who have the right to work in the UK
• Nationals from the EU, EEA or Switzerland with (or eligible for) status under the European Union Settlement Scheme (EUSS)

We are not able to sponsor work visas. Please contact us at  should you have any questions on your nationality eligibility.
Applications are accepted until Wednesday 4 March 2026 – hiring will continue with ongoing interviews up to that date. Final‑stage interviews will take place on WC 9 March 2026.

The National Audit Office (NAO) supports Parliament to hold government to account and to improve public services. We focus on driving long‑term sustainable improvement in public service delivery by working with government and stakeholders to enhance performance and ensure the nation spends wisely.

The IT Audit specialist will join an IT audit team consisting of seven IT Audit Specialists, four IT Audit Managers and four apprentices. The team delivers work across more than 50 clients covering all areas of the NAO’s financial audit client base and is led by an IT Audit Director and four IT Senior Audit Managers. The role supports financial audit teams and IT Audit Managers to scope, plan and perform end‑to‑end IT audit work, including testing General IT Controls and related automated controls.

• Support the IT Senior Audit Managers and IT Audit Managers in the scoping, planning and delivery of the annual programme of IT audit work.
• Manage specific IT audit engagements, as required, depending on experience.
• Use technical knowledge and NAO financial audit methodology to guide FA teams in responding to IT related risks and to produce detailed IT audit responses for relevant technology layers.
• Audit IT application and supporting general IT controls in areas such as Oracle EBS, Oracle Fusion, SAP ECC, SAP S/4 HANA or Unix systems. Knowledge of Active Directory and cloud‑based systems is favourable but not essential.
• Obtain assurance over the effective operation of IT controls, interfaces, reports, segregation of duties, automated calculations, system implementations and migrations.
• Produce quality IT audit work for manager review.
• Document complex business processes and identify controls to address financial and business process risks, including purchase‑to‑pay risks, through process maps.
• Interpret and evaluate third‑party reports (e.g. ISAE 3402) in accordance with ISA 402 for identified controls in support of financial audit teams.
• Communicate technical IT audit findings to non‑specialist internal colleagues and audit managers, summarising impacts, recommending additional audit work and drafting practical recommendations to audited body management.
• Maintain professional relationships with Financial Audit teams, audited bodies and external stakeholders, ensuring progress is communicated and evidence schedules are met.
• Continuously update technical IT and audit knowledge to effectively understand and mitigate risks arising from existing and emerging technology.
• Identify opportunities to improve the quality, efficiency or value of the work performed by the DFA function.
• Support the development and training of IT audit trainees and other colleagues by sharing knowledge and experience.
• Keep up to date with DFA function initiatives, priorities, and partnerships within NAO internal practice networks.

• Strong record of achievement through formal education, professional qualifications, or relevant experience. Evidence may include university degrees, recognised certificates, work‑based learning or equivalent accomplishments.
• Significant experience in IT audit work supporting the financial…