Information Systems Auditor

Job Purpose We're looking for a passionate Information Systems Business Auditor to join our Global Internal Audit Team!

Delivering cyber security, Information Systems (IS), Artificial Intelligence (AI) and technology risk audits, you'll assess risks across the UK and US, including cyber security, cloud technologies, AI-enabled solutions, identity and access management, business-critical systems and Critical National Infrastructure environments. The successful candidate will be able to demonstrate experience in delivering a diverse range of internal IT audit engagements, with experience in cyber security related audits being particularly beneficial.

As a trusted advisor and influencer, you’ll develop strong working relationships across both the business and IS team, breaking down organisational silos and advocating for a more integrated audit approach. As a flexible pragmatist, you’ll synthesize and communicate complex audit topics whilst also providing recommendations to support the business and IT in driving continuous improvement of controls and processes to make them more efficient and effective.

This role is based out of our Warwick office, and we’d hope to see you at least two days per week but you’re welcome to be in the office more often if that would work best for you. We’re happy to discuss any additional flexibility in working patterns or requirements that you feel could help to make this job work for you!

What You'll Have Deliver audits across a broad range of cyber security and technology risk domains including cloud technologies, identity and access management, artificial intelligence, technology resilience and third-party technology risks.

Executes internal audits, with a focus on agility and innovation for value adding and timely delivery.

Maintains high quality and timely audit documentation.

Produces Summary of Issues reports and Draft Audit Reports.

Tracks and updates status of remediation actions undertaken by the business to address identified risks

Support Internal Audit’s continued evolution in the use of data, automation, and AI-enabled ways of working to enhance audit quality, efficiency, and insight.

Deliver assigned program of audits in line with excellent quality and within allocated time, using professional judgement to set the scope and testing approach to ensure key risks are addressed.

Proactively look for areas of improvement during the audit process and provide value adding and insightful recommendations that address control and process opportunities/ weaknesses.

Explore and apply data analytics, automation, and AI-enabled tools responsibly to support audit planning, testing, reporting, issue analysis, and continuous improvement.

Seamless communication with Senior Business Auditors to avoid surprises and ensure audit progression.

Produce Summary of issues (SOI) reports and Draft Audit Reports that are well written and effectively communicate the key finding and recommendations of an audit.

Own and manage a portfolio of audit actions being worked on by business and, on business completion, assess the effectiveness of activities undertaken to address the risks identified.

Develop and maintain strong and positive relationships with key stakeholders and maintain a thorough knowledge of the business and regulatory environment.

What You'll HaveA Graduate degree in a related field (e.g., Accounting, Finance, "STEM" Majors or Business Administration) is expected.

CISA qualified (or working towards qualification) with experience delivering IT audit, cyber security audit or technology risk engagements.

Experience in one or more of the following areas: cyber security, cloud technologies, identity and access management, AI governance, technology resilience, third-party technology risk, major business applications or Operational Technology (OT) environments.

You have hands-on experience with audit delivery and practices, internal control frameworks and risk management activities and applying internal auditing principles and practices.

Knowledge of technology governance, cyber security and risk management frameworks (e.g. NIST, ISO 27001, CIS Controls and COBIT) together with broader risk…