Senior Technology Audit Manager

The Audit & Risk Recruitment Company are very pleased to be partnering with one of the biggest online fashion retailers to help them find a Senior Technology Audit Manager.

The company has been going through a period of phenomenal growth and has ambitious plans. As an online retailer, their focus on first class technology and digital innovation means their Technology team are fundamental to current and future successes.

The business is now looking to improve internal controls and governance. Until recently Internal Audit was outsourced to a third-party but to support these improvements, help meet strategic objectives, and add value Internal Audit is now being brought in-house.

The successful candidate will play a key role within the Internal Audit Management Team, acting as a number two to the Head of Internal Audit. The Senior Manager will be responsible for building, developing, and managing the in-house Tech Internal Audit offering. You will define the Tech audit universe, implement risk assessments, and design the Tech Internal Audit Methodology. 

You will work closely with senior stakeholders across Tech and the wider business to build effective collaborative relationships; and deliver diverse technology audits using co-source or internal staff. This is an exciting time to join a dynamic, fast paced, and ambitious company where you will have plenty of opportunity to make your mark.

Experience/attributes required



•            The ability to lead thinking on technology risk management, governance, compliance, and internal control best practice in an e-commerce/retail environment.

•            Excellent stakeholder management and relationship building skills.

•            Strong negotiation and influencing skills with the willingness to work with the business to define fit for purpose governance and controls. Someone who wants to make a difference and is excited about building a team and launching an in-house technology audit function.

•            Excellent verbal and written communication skills. The ability to tailor their approach to deliver clear, powerful, and succinct messages to technical and non-technical stakeholders at all levels.

•            Experience with data driven auditing, and data analytics and visualisation tools would be an advantage but not essential.

•            A CISA/CRISC/CISM/CISSP or other relevant industry qualification and extensive post-qualification experience in practice or managing in-house/co-sourced technology audits.

•            A strong, diverse technical background including technology transformation, process improvement (SOx compliance an advantage), application of IT and security governance frameworks (e.g. COSO, COBIT, NIST, ISO270001, ITIL etc), and key technology domains.

•            Experience in auditing Oracle, Dynamics 365, in-house software/app development, IT infrastructure, cyber and information security, digital, cloud environments (Azure), IT operations, data privacy/protection and IT programmes and projects.