IT Audit Manager

About us

At Exchange for Change, we are building something the UK has never had before. Working across England, Scotland and Northern Ireland, we are designing and delivering a Deposit Return Scheme from the ground up, creating a system that helps reduce litter and waste by encouraging people to return their empty drinks bottles and cans for recycling.

We are industry led, and driven by purpose. A national movement with a clear mission. No bottle unreturned. No can left behind.

This is not just another job. This is a rare opportunity to do meaningful work, shape a landmark national programme, and help deliver lasting positive impact for people, businesses and the planet alike.

The IT Audit Manager will lead and deliver independent assurance over EfC’s IT systems, digital platforms, infrastructure, security posture and resilience. You will oversee the planning and execution of IT audit activity, ensuring technology and data risks are well understood and effectively managed. You will use strong analytical skills, digital tools and data insights to enhance assurance, support IT risk awareness, oversee follow‑up actions, and maintain up‑to‑date knowledge of emerging technology, cyber and data risks.

You will be part of the Internal Audit & Risk team and work closely with Digital, Data and Technology (DDaT).

You’ll be based at our Milton Keynes office (30min from Euston) with the option to work from home 2 days per week.

IT General Controls (ITGC)

• Lead reviews of access management, privileged access and authentication controls.

• Oversee assessments of change management processes across digital and technology environments.

• Evaluate IT operations controls including backups, monitoring and incident management.

Cyber & Information Security

• Assess cyber security controls against recognised frameworks (e.g. ISO 27001, Cyber Essentials).

• Review vulnerability management, patching and endpoint/network security.

• Evaluate data protection controls including encryption, secure configuration and monitoring.

Business Continuity & Disaster Recovery

• Review business continuity and disaster recovery plans for design and operational readiness.

• Assess backup integrity, recovery testing and resilience of critical systems and data.

• Evaluate crisis management arrangements and alignment with EfC risk appetite.

Audit Delivery, Stakeholder Management & Continuous Improvement

• Lead the planning and delivery of IT audits, using digital tools and data analytics to enhance assurance.

• Provide assurance to the Audit, Finance and Risk Committee (ARC) on the effectiveness of IT governance, risk management and internal controls.

• Produce clear, concise audit findings and recommendations for senior stakeholders and the ARC.

• Build strong, influential relationships with Digital, Data and Technology teams to support constructive challenge.

• Oversee tracking and validation of follow‑up actions to ensure risks are mitigated effectively and sustainably.

• Provide independent advisory and risk-focused guidance on large-scale IT Transformation Programmes, supporting effective delivery, governance, resilience, and business outcomes.

• Clear, strategic insight into technology, data and cyber risks that strengthens EfC decision‑making.

• A maturing and resilient control environment across IT governance, risk management, ITGC, cyber security and digital platforms.

• Audit recommendations that drive timely, meaningful improvements supported by strong evidence.

You will bring strong leadership in IT audit, good judgement and the ability to communicate confidently with senior stakeholders. You will have 6+ years of experience in IT audit, ideally gained in professional practice (though not essential), or…