Director of Audit & Regulatory Engagement (Technology & Cyber)
Permanent contract
London
Salary: Not specified
Experience: > 5 years
Questions and answers about the job
The position
Job description
- Help turn audit findings into lasting improvements by leading external audit engagement across Group Engineering at LSEG. The role also covers regulatory responses, issues and risk reporting, bringing these services together through the safe use of artificial intelligence across Governance, Risk and Compliance
- Report to the Head of Technology & Cyber GRC and set priorities while leading managers, specialists and analysts. This is a first-line role, working with management to address risk; independent assurance remains with the audit and assurance teams
- Lead external audit engagement. Manage relationships with external auditors and bring Finance, control owners and application teams together. Coordinate planning, scope discussions, readiness, evidence requests, walkthroughs and support for testing. Review observations and management responses, resolve evidence gaps and disagreements, and supervise remediation through to closure
- Prioritise Engineering’s responses to internal audits, regulatory examinations and enquiries, and relevant client or contractual assessments. Check evidence and responses, agree owners and track commitments. Keep leaders advised of concerns and decisions needed
- Review self-identified issues and audit or regulatory findings. Question root causes, proposed actions and closure evidence. Confirm remediation reduces the underlying risk rather than just completing an action plan. Identify repeat weaknesses and resolve delays. Coordinate risk acceptances through agreed approval routes
- Maintain a consistent Technology and Cyber risk profile and clear risk and control indicators. Use source-system signals to flag emerging risks and breaches of agreed risk limits. Guide risk committees and provide concise Board and executive reporting, explaining what has changed, why it matters and what leaders need to decide
- Lead the team that builds and maintains AI agents for GRC evidence gathering, analysis and reporting. Choose use cases and work with engineers or delivery partners. Keep agent logic and change knowledge in-house. Assign owners and set limits on agent access and actions. Test output quality and require human approval for material conclusions. Manage logging, changes, incidents and retirement. You do not need to be the lead engineer
- Recruit and mentor colleagues across audit, risk, data and AI governance. Set clear expectations, invite different views and help people build new skills. Measure service quality, reduce rework and focus effort on the highest risks
Preferred experience
- You have built or improved a risk, audit or GRC capability and developed teams with different specialisms
- You can question engineers on data access, testing, reliability and human oversight
- You have led external audit engagements from planning to closure, with direct responsibility for evidence quality, findings and management responses
- Internal audit experience, financial-services knowledge and early-warning analytics
- You build constructive relationships while challenging conclusions when needed
- You challenge weak root causes and check that corrective action reduces risk
- Experience with Information Technology General Controls (ITGCs) or Internal Controls over Financial Reporting (ICOFR)
- You understand AI risks and controls well enough to oversee agent development and maintenance
- Relevant accounting, audit, technology-risk or cyber-security qualifications, or equivalent experience
- You have managed audit, regulatory or remediation portfolios in regulated environments
- You understand Technology and Cyber controls and the evidence auditors and regulators expect
- You can assess risk appetite and interpret risk and control indicators
- You can weigh evidence, provide direction and explain technical or regulatory issues to senior leaders
- Experience with statutory or financial-statement technology audits