IT Senior Auditor

Location: Bristol (Hybrid, 3 days per week in office, 2 days remote)

Duration: 12 month Fixed Term Contract

Salary: £60,000 – £65,000 plus bonus structure and benefits

About the role
Our client, a leading financial services organisation, are looking for an internal IT Senior Auditor to join a function operating within a complex, regulated and technology-driven environment.
You will deliver independent assurance across technology risk, security, resilience, internal controls and major technology change activity.
This is a hands-on, delivery IT Audit role working across Security, Resilience, IT Controls, Technology Risk and Digital Transformation within a fast-moving environment.

Key responsibilities

• Deliver IT audit engagements from planning through to final reporting
• Assess the effectiveness of Security, Resilience and Technology Controls
• Perform detailed control testing and evidence reviews to support audit findings
• Provide assurance across IT change, transformation and digital programmes
• Build and maintain strong relationships with stakeholders across technology and business teams
• Support the delivery of high-quality risk and control assurance activity
• Contribute external insights and data-driven thinking into audit delivery
• Work independently and alongside internal and third-party audit teams
• Support audit planning, risk assessments and scoping activities
• Identify opportunities to improve audit methodology and ways of working

Skills and experience

• Experience within IT Audit, Technology Risk, IT Assurance or Technology Controls
• Strong knowledge of Technical Security and Resilience Controls
• Experience reviewing IT Change, Transformation and Project Delivery Risks
• Understanding of Risk Management, Governance and Control Frameworks
• Exposure to Data Analytics and an interest in technology-led assurance approaches
• Strong analytical skills with the ability to assess complex technology environments
• Ability to communicate technical topics clearly to technical and non-technical stakeholders
• Experience building effective relationships and influencing stakeholders at multiple levels
• Strong attention to detail and a practical approach to risk assessment
• Comfortable working within Agile and evolving technology environments
• Professional certifications such as CISA, CRISC or CISSP would be beneficial
• Strong understanding of Technology Risk, Controls and Assurance principles in regulated environments