Cyber Security Audit Manager

We are seeking a Cyber Security Audit Manager with strong experience assessing and auditing enterprise infrastructure environments. The successful candidate will have a deep understanding of infrastructure technologies, cloud platforms, networks, identity services, and cyber security controls, combined with experience delivering independent assurance within a Third Line of Defence function.

Permanent role in London - Hybrid arrangement

The role

• Assess cyber security controls across infrastructure, cloud, and operational technology environments.
• Lead and manage risk-based internal audits from planning through to reporting.
• Assess business processes, identify control weaknesses, and evaluate the effectiveness of key controls.
• Conduct risk assessments and continuous monitoring activities to identify emerging areas of risk.
• Build strong relationships with stakeholders and provide practical risk and control advice.
• Drive the adoption of innovative audit techniques, automation tools, and data-driven approaches.
• Support the use of AI, Python, analytics, and automation to improve audit effectiveness and efficiency.
• Develop dashboards, data models, and reporting solutions to support audit planning and risk monitoring.
• Analyse large datasets to identify trends, anomalies, control deficiencies, and operational risks.
• Contribute to proof-of-concept initiatives involving AI and emerging technologies.
• Support regulatory reviews, business change initiatives, and remediation validation activities.
• Present audit findings, emerging risks, and key insights to senior management and relevant governance committees.

Essential Experience

• Previous experience working within a Third Line of Defence (Internal Audit) function.
• Strong cyber security and technology audit experience gained within a large commercial organisation.
• Experience auditing complex infrastructure environments, including:
  • Cloud platforms (Azure, AWS, GCP)
  • Windows and Linux Servers
  • Networks
  • Active Directory and Identity Management
  • Virtualisation technologies
  • Containerised environments such as Kubernetes and OpenShift
• Experience assessing cyber security controls across infrastructure, cloud, and operational technology environments.
• Ability to provide independent assurance over cyber, technology, infrastructure, and operational risks.
• Understanding of infrastructure or cyber security background prior to moving into audit is the ideal.
• Experience auditing Kubernetes, OpenShift, Kafka, cloud-native platforms, and DevSecOps environments - desirable

Qualification

• CISSP, CISM, CRISC or CISA certifications.