IT Risk Auditor

Location: London / Hybrid

Contract: 6 months

Day rate:

Diversity & Inclusion Commitment: Our commitment is to provide equal opportunities regardless of gender, age, ethnicity, disability, sexual orientation, religion, or belief. We actively engage with employers to develop programmes and pathways that embrace diverse talent and promote inclusive employment worldwide through partnerships and other initiatives.

Our client is one of the largest financial institutions headquartered in Japan, with an established presence across both consumer and corporate banking globally. Through its subsidiaries and affiliates, the organisation provides a broad range of financial services, including commercial banking, leasing, securities, credit cards, consumer finance, and related services.

The role operates Monday to Friday during standard office hours, with occasional out‑of‑hours work in line with business requirements. The position follows a hybrid working model, with 2–3 days per week in the London office and the remaining time working remotely.

This role supports the delivery of independent assurance over the IT control environment across EMEA business entities. The IT Auditor will undertake and manage audits across a range of IT infrastructure and applications, support audit teams in delivering detailed testing, and contribute to audit opinions provided to EMEA Regional Management and the Group Audit Committee in Tokyo.

Internal Audit provides independent opinions on the effectiveness of changes and controls implemented across the EMEA region. This role is responsible for providing insight and assurance over key controls, and therefore requires the expertise to offer advisory and consultancy input where appropriate during audit engagements.

• Prepare audit planning materials to ensure internal controls addressing key risks are appropriately tested, providing reasonable assurance to the Board, Group Management, Entity Management, and regulators that an effective control environment exists.
• Deliver control assurance activities, including testing and documentation, and at times take a lead role in managing defined areas of audit coverage.
• Direct testing efforts towards key risk areas, agreeing scope and focus with the Audit Partner, and share specialist knowledge with other audit team members.
• Prepare draft Audit Findings for review by Audit Department Management, ensuring findings are factually accurate and clearly articulated.
• Clearly communicate audit issues and recommendations to Audit Management and business stakeholders, including senior management, demonstrating resilience and confidence in challenging discussions.
• Prepare final internal audit reports, clearly highlighting areas of positive assurance as well as opportunities for improvement within the control environment.
• Conduct follow‑up reviews and validate management actions to ensure closure of High and Moderate priority audit findings, providing guidance and support where required.

The IT Auditor may also support the Audit Partner in maintaining relationships with senior management (Director, Executive Director, and Managing Director level) within assigned areas, developing insight into business activities and advising on key areas of risk.

Experience in internal audit with a focus on IT audits within financial services or a regulated environment.

• Strong understanding of IT governance frameworks (e.g. COBIT), cybersecurity principles, IT General Controls, and regulatory requirements such as DORA or GDPR.
• Risk & Control Expertise: Ability to assess technology risks across infrastructure, applications, and third‑party services, and design effective audit procedures.
• Analytical Skills: Strong capability in evaluating complex technical environments, identifying control gaps, and using data analytics to support audit testing.
• Leadership & Team Management: Proven experience leading IT audit engagements, mentoring team members, and managing competing priorities.
• Stakeholder Management: Ability to engage effectively with senior IT and business leaders, influence decision‑making, and maintain strong professional relationships.
• Familiarity with banking technology environments, including core banking systems, cloud platforms, and cybersecurity practices.
• Understanding of financial services regulations impacting IT.
• Experience using audit management systems, data analytics tools, and automated testing solutions.
• End‑to‑end IT audit project delivery experience, including planning, execution, and reporting.

We use generative AI tools to support our candidate screening process. This helps ensure a fair, consistent, and efficient experience for all applicants.