At a Glance
- Tasks: Lead IT audits and ensure effective management of technology and data risks.
- Company: Join Exchange for Change, a purpose-driven organisation making a real impact on the environment.
- Benefits: Competitive salary, bonus scheme, 34 days holiday, and flexible working options.
- Other info: Hybrid working model with opportunities for personal development and career growth.
- Why this job: Be part of a landmark national programme that drives meaningful environmental change.
- Qualifications: 6+ years in IT audit with strong analytical skills and relevant qualifications.
About us
At Exchange for Change, we are building something the UK has never had before. Working across England, Scotland and Northern Ireland, we are designing and delivering a Deposit Return Scheme from the ground up, creating a system that helps reduce litter and waste by encouraging people to return their empty drinks bottles and cans for recycling. We are industry led, and driven by purpose. A national movement with a clear mission. No bottle unreturned. No can left behind. This is not just another job. This is a rare opportunity to do meaningful work, shape a landmark national programme, and help deliver lasting positive impact for people, businesses and the planet alike.
Your role
The IT Audit Manager will lead and deliver independent assurance over EfC’s IT systems, digital platforms, infrastructure, security posture and resilience. You will oversee the planning and execution of IT audit activity, ensuring technology and data risks are well understood and effectively managed. You will use strong analytical skills, digital tools and data insights to enhance assurance, support IT risk awareness, oversee follow‑up actions, and maintain up‑to‑date knowledge of emerging technology, cyber and data risks. You will be part of the Internal Audit & Risk team and work closely with Digital, Data and Technology (DDaT). You’ll be based at our Milton Keynes office (30min from Euston) with the option to work from home 2 days per week.
Key Responsibilities & Priorities
- IT General Controls (ITGC)
- Lead reviews of access management, privileged access and authentication controls.
- Oversee assessments of change management processes across digital and technology environments.
- Evaluate IT operations controls including backups, monitoring and incident management.
- Cyber & Information Security
- Assess cyber security controls against recognised frameworks (e.g. ISO 27001, Cyber Essentials).
- Review vulnerability management, patching and endpoint/network security.
- Evaluate data protection controls including encryption, secure configuration and monitoring.
- Business Continuity & Disaster Recovery
- Review business continuity and disaster recovery plans for design and operational readiness.
- Assess backup integrity, recovery testing and resilience of critical systems and data.
- Evaluate crisis management arrangements and alignment with EfC risk appetite.
- Audit Delivery, Stakeholder Management & Continuous Improvement
- Lead the planning and delivery of IT audits, using digital tools and data analytics to enhance assurance.
- Provide assurance to the Audit, Finance and Risk Committee (ARC) on the effectiveness of IT governance, risk management and internal controls.
- Produce clear, concise audit findings and recommendations for senior stakeholders and the ARC.
- Build strong, influential relationships with Digital, Data and Technology teams to support constructive challenge.
- Oversee tracking and validation of follow‑up actions to ensure risks are mitigated effectively and sustainably.
- Provide independent advisory and risk-focused guidance on large-scale IT Transformation Programmes, supporting effective delivery, governance, resilience, and business outcomes.
What success looks like
- Clear, strategic insight into technology, data and cyber risks that strengthens EfC decision‑making.
- A maturing and resilient control environment across IT governance, risk management, ITGC, cyber security and digital platforms.
- Audit recommendations that drive timely, meaningful improvements supported by strong evidence.
About you
You will bring strong leadership in IT audit, good judgement and the ability to communicate confidently with senior stakeholders. You will have 6+ years of experience in IT audit, ideally gained in professional practice (though not essential), or within an internal audit, risk or technology assurance function. You will hold or be working towards a relevant qualification such as CISA, CISSP, CRISC, ISO 27001 Lead Auditor, or equivalent. You will have experience working with digital platforms, cloud environments, modern technology stacks and data governance. You are comfortable using data analytics to support audit testing and confident assessing risks across digital transformation, automation, integration and emerging technologies. You are analytical, curious and proactive, committed to your own development and to strengthening IT and data risk awareness across EfC.
The opportunity
Work that makes a difference - and a place where you can too. This is a once-in-a-generation opportunity to help establish a scheme of national importance, working with purpose-driven colleagues and partners to deliver visible, real-world impact. You’ll contribute directly to meaningful environmental and social change and in return, we support and reward our team through a range of benefits and initiatives, including:
- Competitive base salary
- Bonus scheme
- 34 days holiday inclusive of bank holidays, additional holidays for length of service
- Flexibility with holidays. You may work on a local public holiday and take an alternative day off, giving you the freedom to celebrate the days that matter most to you.
- 5% employer pension contribution
- Life Insurance: Cover of 4 times base salary
- Private Medical Insurance: Includes GP access and an Employee Assistance Programme (EAP) for wellbeing support
- Income protection
- Family Leave: Maternity, adoption, parental, and paternity leave policies will be developed to be progressive and inclusive.
- Hybrid Working: 60% office or field-based and 40% home-based, with some flexibility according to business and personal needs.
IT Audit Manager in Milton Keynes employer: Exchange for Change
Exchange for Change is an exceptional employer that offers a dynamic and impactful work environment in Milton Keynes, where you can play a pivotal role in driving environmental change through the UK's Deposit Return Scheme. With flexible work arrangements, competitive benefits, and a strong focus on employee growth and collaboration, you'll find meaningful opportunities to develop your skills while making a difference in the community.
StudySmarter Expert Advice🤫
We think this is how you could land IT Audit Manager in Milton Keynes
✨Join the IT Consultancy Buzz
Get involved in local or virtual IT consultancy meetups and forums. This is where we can rub shoulders with industry professionals, get insights into what Exchange for Change values, and even spot unadvertised opportunities. Don't miss out on these chances to make a name for ourselves in the IT world!
✨Show Off Your Skills
Create a personal project or case study relevant to the challenges Exchange for Change might face. Use platforms like GitHub or Medium to share your findings. This not only demonstrates our consulting skills but shows a proactive attitude, making us stand out from the crowd when applying for that full-time gig.
✨Leverage LinkedIn for Connections
Follow and engage with the relevant thought leaders and influencers in IT consultancy on LinkedIn. Share insightful content and join discussions to gain visibility. A well-placed comment or shared article could catch the attention of someone at Exchange for Change!
✨Direct Apply to Exchange for Change
Let's not forget to apply directly through the Exchange for Change website! Tailor your application to showcase our understanding of their consulting style and how we can contribute to their projects. A personalised approach can make a huge difference in landing that full-time position!
We think you need these skills to ace IT Audit Manager in Milton Keynes
Some tips for your application 🫡
Showcase Your Problem-Solving Skills:In IT consulting, it's all about problem-solving, so make sure your CV highlights your analytical skills and any relevant projects you've tackled. Mention specific technologies or methodologies you've used to resolve issues or improve processes; this shows you can think critically and deliver results, which is vital for us at Exchange for Change.
Highlight Relevant Certifications:Certifications like ITIL, PMP, or even specific tech stack qualifications can really make you stand out. Make sure to include these in your CV, as they not only demonstrate your expertise but also your commitment to staying current in the field. We love seeing candidates who are proactive about their professional development!
Tailor Your Cover Letter:Your cover letter is your chance to connect personally with us at Exchange for Change. Share stories about your experiences in IT consulting, and how they shaped your desire to join our team. Mention why you’re excited about this particular role, and how you see yourself contributing to our projects.
Keep It Clear and Concise:We're all busy, so make sure your application is easy to read. Use bullet points for key achievements, and don’t overload us with jargon. A clean, professional layout goes a long way. Remember, the clearer your application, the more likely we are to invite you in for an interview!
How to prepare for a job interview at Exchange for Change
✨Brush Up on Your Technical Skills
For an IT consulting role, be ready to demonstrate your technical prowess. You might face questions on systems integration, cloud technologies, or even troubleshooting specific software. If you have experience with tools like AWS, Azure, or even specific programming languages, make sure you can talk about them fluently.
✨Showcase Your Problem-Solving Approach
IT consulting is all about solving problems for clients. Think about how you can illustrate your approach to a past challenge using the STAR method (Situation, Task, Action, Result). It's a great way to show how you tackle complex issues and come up with effective solutions.
✨Know the Business Impact of IT Solutions
When discussing your experiences, focus not just on the tech solutions you implemented, but also on their business impact. Employers want to see that you can connect IT with organisational goals. Prep examples that highlight how your tech contributions improved efficiency or reduced costs for past clients or projects.
✨Prepare for Behavioural Questions
Since IT consulting often involves teamwork and client interactions, expect behavioural questions that assess your interpersonal skills. Be prepared with examples that demonstrate your adaptability, communication skills, and how you handle client feedback. Before the interview, think of situations where you worked closely with clients to create effective IT strategies or changes.
