- Company Name
- Spencer Rose
- Job Title
- AVP - Internal Auditor (Cyber Security)
- Job Description
-
Job Title: AVP – Internal Auditor (Cyber Security)
Role Summary: Lead and conduct complex technology and information security audits within a financial services setting, focusing on continuous monitoring, risk assessment, and remediation validation to support regulatory compliance and internal control improvement.
Expectations:
- Execute audit plans, develop test strategies, and produce findings for senior management.
- Monitor emerging risks, validate management remediation, and drive departmental improvement initiatives.
- Maintain professional standards, adhere to IIA guidelines, and contribute to evolving audit methodology.
Key Responsibilities:
- Build and sustain working relationships across the organization to identify and communicate unidentified risks and control issues.
- Perform continuous monitoring, stakeholder engagement, and emerging risk reporting.
- Support the Internal Audit risk assessment process and inform the audit plan.
- Design and execute audits for complex technology, information security, and high‑level reviews.
- Validate and track remediation of audit and regulatory issues.
- Lead and promote improvement initiatives within the Internal Audit function.
- Share knowledge and learning opportunities with team members.
Required Skills:
- 8+ years in internal audit within a financial services environment, with experience across IT systems and processes.
- Technical subject‑matter expertise in cyber security domains (access control, threat & incident response, data protection, vulnerability management, monitoring & logging, physical security, risk governance).
- Proficiency with security and risk frameworks (ISO 27000, NIST, CIS Controls, COBIT, IIA GTAGs).
- Knowledge of regulatory standards (GDPR, BCBS 239, FFIEC, FCA, FRBNY, CHAP).
- Strong communication skills (written and verbal), stakeholder engagement, and issue‑validation capabilities.
- Working knowledge of cloud, blockchain, high‑volume transaction systems, application controls, and data analytics/gov.
Required Education & Certifications:
- Bachelor’s degree in Accounting, Finance, Information Technology, or related field.
- Audit/Project Management certifications preferred: CIA, CISA, CGEIT, CISSP, CISM, PRINCE2, Agile, etc. (UK/US)
---
Docklands, United kingdom
Hybrid
Senior
03-12-2025