Cloud & Infrastructure Audit Manager – Tech Controls in Bristol

As an Audit Manager working across the Cloud, Infrastructure & Engineering portfolios, you’ll have a deep understanding of core infrastructure, cloud technologies and modern software engineering practices. You’ll also work across the delivery of the Group’s technology strategy and major technology change initiatives. You’ll contribute to the delivery of high‑quality audits by leading audits or elements of large audits in accordance with the agreed plan, with relative autonomy and a deep understanding of business strategy, controls and risks to provide high‑quality independent assurance on the effectiveness of technology frameworks and controls.

This is a unique opportunity for individuals with a growth mindset and critical thinking to join a fast‑paced technology environment in one of the UK’s largest digital banks and positively contribute to the overall effectiveness and efficiency of LBG’s delivery of its technology strategy.

Day to day you will:

• Contribute to the audit plan, supporting the portfolio lead by project‑managing individual audits on their behalf.
• Support control testing and identify areas of concern, articulating the potential challenges.
• Support senior colleagues build meaningful relationships whilst making their own connections.
• Proactively suggest and deliver improvements in current compliance processes by being bold.
• Conduct research considering multiple perspectives and bring the outside in to enable analysis of key themes and external trends.
• Actively role model the Group values and behaviours.
• Put the team first by coaching with purpose, remaining present with the team and openly communicating expectations.
• Freely share insight and timely, direct, effective feedback that adds to the success of the delivery plan and leaves a positive, sustainable impact on the function.

What you’ll need:

• The ability to lead and take ownership for delivery, and champion colleagues’ growth and development.
• The ability to deliver risk and control assurance activity that is timely, impactful and insightful.
• The ability to understand and interpret Group and Business Unit Strategy and connect audit delivery and business monitoring insights to such strategies at the macro level.
• The ability to analyse, understand and communicate data as information, and to use data to drive effective audit outcomes.

In addition, you’ll need technical knowledge and experience in most of the following:

• Core infrastructure components including networking, middleware, operating systems, and storage.
• Cloud technologies, models, and control frameworks (e.g., CSA CCM), with hands‑on experience on Google Cloud and/or Microsoft Azure.
• Modern software engineering frameworks (e.g., NIST, OWASP) and practices (e.g., DevOps).
• IT general controls including access management, service management, and cybersecurity.
• Automated control testing using scripting languages or cloud CLIs (e.g., Python, gcloud, PowerShell) to validate control effectiveness.
• Technical skills might be demonstrated by professional qualifications such as CISA, CISSP or cloud accreditations, or by extensive work‑based experience in relevant areas.
• Previous financial services, auditor risk experience is beneficial.

We focus on ensuring we’re inclusive every day, building an organisation that reflects modern society and celebrates diversity in all its forms. We want our people to feel they belong and can be their best, regardless of background, identity or culture. We are also confident in supporting reasonable adjustments for disability.

Benefits:

• A generous pension contribution of up to 15%
• An annual performance‑related bonus
• Share schemes including free shares
• Benefits that can adapt to your lifestyle, such as discounted shopping
• 30 days’ holiday, with bank holidays on top
• A range of wellbeing initiatives and generous parental leave policies

Required Skills: Networking, Operating Systems, Python, Service Management, Storage, DevOps, Cloud technologies, PowerShell, Google Cloud, Microsoft Azure, Cybersecurity, Automated Testing, CISSP.