Technology Risk & Controls Assurance Senior Analyst in London

The Technology Risk & Controls Assurance (TRCA) Senior Analyst supports the delivery of technology risk and controls assurance services across financial statement audits, SOC engagements, and broader risk assurance work. This role is suited to an individual with relevant experience in technology risk, IT audit or controls assurance who can work with increasing autonomy while supporting high-quality client delivery. You will be expected to perform testing independently, contribute to planning, identify technology risks affecting financial reporting and support the development of junior team members. As part of your development, you will be supported to work towards the ISACA Certified Information Systems Auditor (CISA) professional qualification and will be expected to sit and pass the CISA exam within the first 18 months.

Key Responsibilities

• Deliver testing over ITGCs, IT application controls, interface controls, automated controls and IPE with limited supervision.
• Support ISA 315-aligned IT understanding and risk assessment, including systems, data flows, key reports and risks arising from IT.
• Prepare clear, review-ready workpapers, testing templates, issue summaries and RACMs.
• Identify control deficiencies, exceptions and root causes, and elevate issues clearly to engagement leads.
• Liaise professionally with client stakeholders and audit teams to obtain evidence, resolve queries and maintain delivery timelines.
• Support financial statement audit related technology controls assurance, SOC 1, SOC 2 and regulatory assurance engagements as required.
• Assist with planning, sample selection, evidence tracking and execution across assigned workstreams.
• Coach Analysts on selected tasks and contribute to TRCA methodology, templates and knowledge sharing.
• Manage assigned workstreams across multiple engagements and extend risks, delays or uncertainties promptly.

Skills, Knowledge and Expertise

Essential:

• Experience in IT audit, technology risk, controls assurance or external audit support.
• Good understanding of IT General Controls, IT Application Controls, interfaces, automated controls and IPE.
• Ability to document processes, testing and conclusions clearly in an audit-ready and professional manner.
• Strong analytical mindset, professional scepticism and attention to detail.
• A commitment to ethical standards, collaboration and high-quality client service.
• Confident communication skills with the ability to liaise effectively with clients, managers and audit teams.
• Ability to manage competing deadlines, take ownership of deliverables and support junior colleagues.
• Working knowledge of assurance and control frameworks such as ISA 315, SOC reporting or related risk standards.

Desirable:

• Progress toward or completion of a professional qualification such as ISACA CISA.
• Exposure to ERP, cloud or SaaS environments and the technology risks relevant to financial reporting.
• Experience supporting walkthroughs, control design assessments or issue remediation discussions.