Senior Internal Auditor - Technology

We are Centrica! We’re so much more than an energy company. We’re a family of brands revolutionising a cleaner, greener future. Working here is #MoreThanACareer - we’re powered by purpose. Together we can make an impact that will truly change tomorrow. Whether you’re developing cutting-edge green tech, helping customers on the front line or simplifying operations behind the scenes. Your work here isn’t just a job – it’s a mission. We all play a vital role in energising a greener, fairer future.

An excellent opportunity to join our Internal Audit team as a Technology Specialist, where your expertise will drive impactful change. You will play a pivotal role in assessing and improving technology risks and controls, supporting the company’s strategic objectives. This is your opportunity to shape business outcomes, collaborate with diverse teams, and influence the evolution of our Technology and Data Strategy.

In this role you will contribute to delivering individual audits, and the associated reports, in order to provide assurance to the Audit Committee, and to business management, that risks are managed within risk appetite. In turn this will support the business in delivering shareholder value via their strategic objectives, by ensuring control gaps are identified, and remediated.

Location: Office in Windsor with flexible home working

What You’ll Do:

• Planning, scoping, executing and reporting of technical audits based on identified risks
• Work with business stakeholders during the audit life cycle
• Operational delivery of technology audit activities working within a team and with wider members of Centrica or other subject experts. This will be a mixture of delivering pure technology audits e.g. cyber, data management, software delivery and working collaboratively with other internal audit functions inputting into the technology elements of wider Group and Business Unit audits. This will primarily involve designing and completing testing of controls to be able to identify gaps, and clearly communicate these, and the potential implications
• Writing draft reports and creating deliverables during the audit delivery lifecycle
• Manage the activity of others on specific audit assignments
• Contribute to the delivery and evolution of the Technology and Data Strategy and methodology
• Take a lead role on specific technology audit assignments, delivering to schedule and to the required quality standards on all assignments
• Application of experience, initiative and judgement to situations encountered in audits and working closely with subject matter experts (SMEs) on more complex and specialist risk areas
• Appropriate use of escalation to produce high quality deliverables

What We’re Looking For:

• Strong knowledge of technology risk, architecture, systems, operations, cyber, software delivery lifecycle and controls
• Analytical with strong attention to detail
• Comfortable interacting with technical teams and business leaders
• Experience of delivering technical audits to time and budget
• Able to translate technical risks into business issues. Confident of working with teams spanning the software delivery lifecycle
• Strong knowledge of data management principles in accordance with current data privacy legislation
• Be able to link technology strategy to business strategy and be able to articulate link to stakeholders
• Effective communicator in both written and verbal communications, including being able to propose practical actions and tailor communications to a variety of levels of stakeholder with varied levels of technology risk understanding
• Confident in manipulating data to drive audit insight and efficiency using various tools including Microsoft Excel and Power BI
• Able to understand, identify and clearly articulate risks and controls arising in relation to a wide range of issues and able to design testing activities in line with the department methodology
• Robust and independent mindset with the confidence to raise issues appropriately
• Able to work effectively as part of a team to deliver to tight deadlines
• Potential to lead small teams and manage smaller groups of people
• Ambitious with a genuine passion for broadening their knowledge of auditing, risk management and controls
• Degree level qualification, which is in technology, or non-technology degree accompanied by subsequent technology relevant qualification e.g. CISM, CISSP, CISA or equivalent
• Relevant technology qualification e.g. CISM, CISSP, CISA or equivalent

Work Experience:

• Experience of risk, controls, compliance and/or internal audit
• Experience of performing architecture design reviews is desirable
• First hand experience of delivering cyber audits is essential
• First hand experience of working within a regulated entity with a technical focus is desired