Senior Audit Manager (Applications & Integrated Audit) in London

Responsibilities

• Lead and oversee audits that are technology, application, data and operational controls focused, delivering assurance over the design and effectiveness of application control environments across the Data & Analytics business.
• Act as the application audit domain expert within audit teams, providing insight on application architecture, business logic, automated processing, data flows, access management, configuration, change governance, resilience, monitoring and security controls throughout the audit lifecycle.
• Support audit planning and scoping by identifying application-related risks, emerging technology trends and control weaknesses, ensuring audits appropriately address the key technology and business risks associated with critical applications, products and data platforms.
• Monitor audit team progress and act as the main point of contact for assigned engagements, ensuring audits progress in line with expectations, methodology requirements, timelines and budgets.
• Help audit teams resolve issues and blockers in a timely manner, calling out matters appropriately to the Audit Director or Head of Audit.
• Lead audit team meetings and working sessions, providing direction and coaching throughout the audit lifecycle.
• Where required, support execution activities directly, including walkthroughs, testing and documentation, particularly on complex application, technology or data-related controls.
• Deliver high-quality audits on time and within budget while managing audit risk through consistent application of Internal Audit methodology.
• Complete supervisory reviews of audit files in a timely manner and ensure audit quality meets Internal Audit standards.
• Develop impactful audit findings and reports, engaging partners early to ensure observations are relevant, practical and productive.
• Maintain a proactive, forward-looking approach to identifying risks, dependencies and potential delivery challenges.
• Build and maintain strong partner relationships and confidently manage partner meetings, ensuring consistency to the Internal Audit “no surprises” approach.

Application Risk & Control Assessment:

• Evaluate control environments across key domains, including Access Management, Monitoring and Logging, Application Configuration, Organisational Change, Business Logic and Automated Processing, Data Governance and Integrity, Resilience and Continuity and Application Security.
• Assess application design, integrations, data flows, and automated processes to identify risks related to data integrity, operational effectiveness, resilience, and regulatory compliance.
• Review application business logic, algorithms, and processing controls to ensure alignment with business requirements and regulatory expectations.
• Provide assurance over the completeness, accuracy, and governance of data, reporting, and customer-facing outputs.

Governance, Change & Assurance:

• Review governance over application configuration, business rules, and reference data, including change control, testing, and approvals.
• Evaluate controls over data quality, lineage, transformation, and interface management.
• Assess monitoring, logging, and alerting capabilities to ensure timely detection and remediation of incidents.
• Review change management processes, including SDLC practices, segregation of duties, and deployment controls.
• Evaluate resilience, disaster recovery, and business continuity arrangements, including third-party dependencies.
• Assess application security practices, including vulnerability management, penetration testing, and secure development.

Audit Delivery & Partner Management:

• Deliver audits in line with Internal Audit methodology (planning, fieldwork, reporting, validation).
• Produce clear, impactful audit reports that articulate risks, control gaps, and business impact.
• Build strong partner relationships to influence improvements in the control environment.
• Collaborate with Cyber and Infrastructure audit teams to ensure end-to-end technology risk coverage.

Leadership & Continuous Improvement:

• Coach and develop team members in audit methodology, technology risk, and application controls.
• Contribute to audit planning through insights on emerging risks and technology developments.
• Support Internal Audit initiatives, continuous improvement, and adoption of standard methodologies and tools.

Qualifications

• Recognised Internal Auditing (IIA / CIIA) or Accounting Qualification. May be Part Qualified.
• Good communication and teamwork skills.
• Experience in a fast-paced international organisation would be advantageous.
• Relevant professional qualification CISA, CISSP or equivalent qualifications.
• Broad relevant experience required in assurance delivery and supervision.
• SME Technical Knowledge.
• Extensive partner management experience.
• Continuous improvement attitude.