Internal Audit - Tech Risk Services - Manager

More than you expected

Grant Thornton UK LLP is part of a global network of independent audit, tax and advisory firms, made up of some 58,000 people in over 135 countries. We're a team of independent thinkers who put quality, inclusion and integrity first. All around the world we bring a different experience to our clients. A better experience. One that delivers the expertise they need in a way that goes beyond. Personal, proactive, and agile. That's Grant Thornton.

Job Description:

Grant Thornton's Technology Risk Services team (TRS) provides the advice necessary to help clients manage risk associated with their use of technology. Our professionals can deliver objective, value-added solutions that will enable clients to strengthen internal controls and governance processes, implement sound organisational strategies, increase technological capabilities and improve their operational efficiency. TRS is part of Grant Thornton's Business Risk Services ('BRS') department, who provide internal audit and risk advisory services to the FTSE 250, large and complex Corporates, international and major charities and not-for-profit organisations, and central government departments.

You will be responsible for managing and delivering a number of IT internal audit engagements in a manner that exceeds client expectations.

Main Responsibilities

• You will work as part of the team, effectively providing a hands-on advisory service that exceeds our clients' expectations and allows Grant Thornton to deliver a high-quality audit to clients
• You will have responsibility for the effective completion of engagements, including
  • Assisting with the preparation of draft terms of reference/audit planning documents
  • Providing input into budgets for internal audit reviews
  • Delivering fieldwork, ensuring all work is performed in accordance with GT methodologies, that testing sufficient and appropriate testing has been performed, and evidence to support key decisions has been obtained
  • Reviewing fieldwork of audit team members and providing oversight of engagements, assisting directors with their client portfolios where necessary
  • Holding close-out meetings with client to ensure that they and the client has a full understanding of issues identified and these are agreed
  • Documenting and reviewing draft and final internal audit reports, ensuring the written work is of a high standard, is factually correct, recommendations are appropriate and tailored to the needs of the intended audience, and requires minimal manager and Partner input.
  • Monitoring your time on clients and flagging any issues up to the manner in a timely manner.

Essential

• Professional IT audit qualification (CISA, CISM, CISP, or similar)

Desirable

• Cyber security related qualifications
• Other relevant qualifications, including ITIL, COBIT, PRINCE2, ACA, etc...

Experience

• Strong experience of auditing Cyber Security, Data Protection/Privacy (inc GDPR), IT Strategy, Change Management, Business Continuity & IT Disaster Recovery, IT Infrastructure (including Databases), and IT asset management
• A good track record of performing IT audits over IT Projects & Programmes (inc Agile), Cloud & Virtualisation technologies, IT transformations, System Implementations, Digital, and Third-Party Management Arrangements
• Experiencing of testing of IT general and automated SOX controls
• Familiarity with related regulation and frameworks such as Cyber Essentials, NIST, GDPR etc...
• Technical awareness and auditing experience of common operating systems, financial applications, and underlying databases
• Scoping IT audits (including developing budgets) and managing IT audit from end-to-end
• Good client relationship management skills
• Strong communication skills (both written and oral)
• Experience of working with Large Corporates (FTSE 250+)
• Portfolio management experience, including ability to manage multiple projects concurrently
• Assisting with developing proposals in response to IT audit tenders and client presentations
• Preparing and delivering presentations
• UK government SC ('Security Check') clearance
• Performing testing to support Service Attestation Reports such as IASE3402
• Experience with auditing ERPs such as SAP S/4 HANA and Oracle Fusion.
• Exposure to reviews of software developments, including various programming / coding languages
• Previous experience of providing IT audit services to industries similar to Grant Thornton's internal audit client base.
• Familiar with using good practice frameworks and regulatory standards, including COBIT, ISO 27001, Cyber Essentials, PRINCE2, and Agile
• Strong personal networking skills
• People management and coaching skills
• Interviewing and assessing potential candidates

Do you care about the same things we do?
We have six values we work by. When we meet, we'll want you to show us how they're important to you, too.
Collaboration: We are aligned around a common purpose that unites us in providing the same quality experience for our clients and our people, seamlessly across borders.
Leadership: We are committed to the success of our clients, our people, our profession, and our stakeholders at large, demonstrating leadership at all levels.
Excellence: We are passionate about exceeding expectation and delivering high quality work. We love what we do, and it shows. We sweat the details. We see things through, no matter how tricky.
Agility: The world moves quickly. To keep up, we stay flexible - changing approaches, changing projects, working offline, online, together and alone to get things done.
Respect: A given, of course: we value each other and our clients. We listen, we understand, we care.
Responsibility: The decisions we make and advice we give affects people's lives and livelihoods. We take that seriously and always do well by doing what's right.

Bring your whole self
Now you've seen our values, it shouldn't be a surprise that we're creating a respectful, open, diverse place to work. Building an inclusive culture, where we value difference and respect our colleagues, is not just the right thing to do, it helps our people to perform at the best of their ability and realise their potential.

"We are committed to making sure that the opportunities within our firm are equally accessible for everyone - regardless of background or gender." Dave Dunckley, CEO

There's more to life than work
Families, children, sports, night classes...the things you do and the people you're with outside work matter. They can inspire, motivate and energise you. Inside the office and out. So if you'd like to work flexibly, let us know. We're happy to look at flexible working options for all our roles, and we'll always do our best to keep your work and life in balance.

#gtro

#LI-MK1