As an Audit Analyst you'll support in the delivery of high-quality audits. Own the design and operational evaluation and testing of key controls. Apply proficient knowledge and application of audit methodology and assigned risk areas.
You'll act as a proactive team member, with a growth mindset, positively contributing to the overall effectiveness and efficiency of the audit. Contributing to the ongoing development and improvement of GA&CI through a strategic and integrated audit focus, collaboration and agile delivery methods.
Day to day, you will
-
Contribute to the audit plan, delivering specified outcomes and providing support by working as directed within the Audit Team.
-
Support control testing and can identify areas of concern, articulating the potential challenge.
-
Help senior colleagues and build meaningful stakeholder relationships.
-
Conduct research considering multiple perspectives and bring the outside in to enable analysis of key themes and external trends.
-
Suggest improvements in current compliance processes by being bold.
-
Support in building and developing automation tools, and AI solutions to drive efficiencies and innovation in the function.
-
Actively role model the Group values and behaviours.
-
Proactively identify, address and drive personal development opportunities and create a positive learning culture based on effective coaching.
-
Freely sharing insight and timely, direct, effective feedback that contributes to the success of the delivery plan and leaves a positive, sustainable impact on the function
What you'll need:
-
Ability to independently review processes, identify risks and perform testing of security (including cyber, information and physical) and operational resilience controls at an application and infrastructure level and highlight potential gaps under minimal supervision. Skilled in writing and agreeing high quality findings.
-
Ability to complete audits of public and private cloud controls, software development lifecycle, modern engineering practices and tools. Good understanding of Artificial Intelligence (AI) and application within business processes.
-
Experience of identifying and testing key IT application controls, including automated business controls and IT general controls, and understanding of change execution and delivery risks.
-
Experience in auditing Operating Systems (e.g., UNIX/Linux, Mainframe, Windows Server, and Windows Desktop), Distributed Systems (e.g., Storage, Backups, and Databases) Network devices (e.g., Routers, Switches, and Firewalls) and data centre resilience.
-
Ability to lead and take ownership for delivery, prioritize your work and that of others effectively to ensure timely and valuable delivery and championing colleagues' growth and development.
-
Ability to quickly grasp new technology concepts and apply them to audits. Bringing critical thinking to support forward-looking and impactful insights on current and emerging risks and opportunities.
And any experience of these would be really useful:
-
Knowledge of how to use or apply data analytics to drive impact audit outcomes, continuous risk monitoring and data analysis.
-
Experience with relevant control frameworks, including COBIT, ISO, ITIL and NIST frameworks. Good understanding of Technology regulatory environment.
-
Whilst not a pre-requisite, relevant professional qualifications would be a plus such as Certified Information Systems Auditor (CISA), Certified Internal Auditor (CIA), Certified Information Systems Security Professional (CISSP), or professional certification(s) issued by major cloud suppliers.
-
Previous financial services audit or risk experience is desirable
