• Manage the day-to-day delivery of IT audit engagements for banking, insurance, asset management, fintech and payments clients, from planning and scoping to reporting and sign-off
• Plan, perform and review testing of IT general controls (ITGCs), application controls and information produced by the entity, and link IT risks to risks of material misstatement
• Provide assurance that supports financial statement audits and the IT element of regulatory frameworks, including service organisation reporting (SOC 1/ISAE 3402) and client assets (CASS) and safeguarding work monitored by the Financial Conduct Authority (FCA)
• Review your team’s work, give clear and timely feedback on control deficiencies, and escalate complex issues early with a recommended response
• Work closely with senior managers, directors and partners so IT and financial audit plans stay aligned, with no surprises
• Build relationships with client finance, technology and information security teams
• Manage engagement budgets, hours and resourcing, and flag scope changes early
• Coach and develop your team, including multi-location and offshore colleagues, and help them use AI and data tools responsibly
• Take part in quality reviews and regulatory inspections, and act on what they teach us

Benefits

• Income protection
• Matched pension
• Life cover
• Private medical, including anytime access to Doctor@Hand and Stronger Minds
• Professional subscriptions

• Experience of managing IT audit engagements day to day and supervising junior colleagues
• Strong knowledge of ITGCs, application controls and ISA (UK) 315
• A professional qualification (ACA, ACCA, CA or an international equivalent), or a recognised IT audit or security qualification (CISA, CISM or CRISC) with relevant experience
• A good understanding of the UK regulatory environment, including the FCA and the Prudential Regulation Authority (PRA)
• A record of high audit quality, shown by strong inspection or internal quality review results
• Solid IT audit experience in financial services, ideally from a Big 4 or mid-tier firm, or from internal audit or technology risk in a regulated firm
• CASS and safeguarding assurance experience
• Audit analytics and automated testing
• Experience of fintech, payments, crypto or digital assets
• SOC 1/ISAE 3402 reporting experience