Information Systems Auditor

We're looking for a passionate Information Systems Business Auditor to join our Global Internal Audit Team! Delivering cyber security, Information Systems (IS), Artificial Intelligence (AI) and technology risk audits, you'll assess risks across the UK and US, including cyber security, cloud technologies, AI-enabled solutions, identity and access management, business-critical systems and Critical National Infrastructure environments. The successful candidate will be able to demonstrate experience in delivering a diverse range of internal IT audit engagements, with experience in cyber security related audits being particularly beneficial.

As a trusted advisor and influencer, you’ll develop strong working relationships across both the business and IS team, breaking down organisational silos and advocating for a more integrated audit approach. As a flexible pragmatist, you’ll synthesize and communicate complex audit topics whilst also providing recommendations to support the business and IT in driving continuous improvement of controls and processes to make them more efficient and effective.

This role is based out of our Warwick office, and we’d hope to see you at least two days per week but you’re welcome to be in the office more often if that would work best for you. We’re happy to discuss any additional flexibility in working patterns or requirements that you feel could help to make this job work for you!

What You'll Have

• Deliver audits across a broad range of cyber security and technology risk domains including cloud technologies, identity and access management, artificial intelligence, technology resilience and third-party technology risks.
• Execute internal audits, with a focus on agility and innovation for value adding and timely delivery.
• Maintain high quality and timely audit documentation.
• Produce Summary of Issues reports and Draft Audit Reports.
• Track and update status of remediation actions undertaken by the business to address identified risks.
• Support Internal Audit’s continued evolution in the use of data, automation, and AI-enabled ways of working to enhance audit quality, efficiency, and insight.
• Deliver assigned program of audits in line with excellent quality and within allocated time, using professional judgement to set the scope and testing approach to ensure key risks are addressed.
• Proactively look for areas of improvement during the audit process and provide value adding and insightful recommendations that address control and process opportunities/weaknesses.
• Explore and apply data analytics, automation, and AI-enabled tools responsibly to support audit planning, testing, reporting, issue analysis, and continuous improvement.
• Seamless communication with Senior Business Auditors to avoid surprises and ensure audit progression.
• Produce Summary of issues (SOI) reports and Draft Audit Reports that are well written and effectively communicate the key finding and recommendations of an audit.
• Own and manage a portfolio of audit actions being worked on by business and, on business completion, assess the effectiveness of activities undertaken to address the risks identified.
• Develop and maintain strong and positive relationships with key stakeholders and maintain a thorough knowledge of the business and regulatory environment.

What You'll Have

• A Graduate degree in a related field (e.g., Accounting, Finance, "STEM" Majors or Business Administration) is expected.
• CISA qualified (or working towards qualification) with experience delivering IT audit, cyber security audit or technology risk engagements.
• Experience in one or more of the following areas: cyber security, cloud technologies, identity and access management, AI governance, technology resilience, third-party technology risk, major business applications or Operational Technology (OT) environments.
• You have hands-on experience with audit delivery and practices, internal control frameworks and risk management activities and applying internal auditing principles and practices.
• Knowledge of technology governance, cyber security and risk management frameworks (e.g. NIST, ISO 27001, CIS Controls and COBIT) together with broader risk and controls frameworks would be advantageous.
• You’re comfortable working in a fast-paced environment, are used to managing multiple priorities and have strong project management experience, including managing project teams.
• Information system internal audit delivery and practices, internal control frameworks, risk management activities and skill in applying internal auditing principles and practices.
• Comfortable exploring and using data analytics, automation, and AI-enabled tools responsibly to improve audit quality, efficiency, and insight.
• Demonstrated track record of developing successful, long lasting, relationships across the business including ability to engage, challenge and influence senior managers, deal effectively with resistance to proposals and secure their buy-in and support.

Don’t meet every single requirement? Studies have shown that women and people of colour are less likely to apply for jobs unless they meet every single qualification. At National Grid, we are committed to building a diverse, inclusive, and authentic workplace for everyone. So, if you’re excited about this role but your experience or qualifications don’t match the job description exactly, we encourage you to apply anyway. You might just be the right person for our growing business in this role or another one.

What You'll Get

Up to 70,000 dependent on experience. As well as your base salary, you will receive a bonus based on personal and company performance with on target being 15% (with a maximum of 30%) and a competitive contributory pension scheme where we will double match your contribution to a maximum company contribution of 12%. You will also have access to several flexible benefits such as a share incentive plan, salary sacrifice car and technology schemes, support via employee assistance lines and matched charity giving to name a few.

Further Information

The closing date for this vacancy is Midnight 26 August 26, with interviews due to take place w/c 31 August 26 onwards. We encourage candidates to submit their applications as early as possible and not to wait until the published closing date. National Grid’s recruitment periods can and may vary. We reserve the right to remove this advert or close it to further applications at any point during the recruitment process.

About us

Every day we deliver safe and secure energy to homes, communities, and businesses. We are there when people need us the most. We connect people to the energy they need for the lives they live. The pace of change in society and our industry is accelerating, and our expertise and track record puts us in an unparalleled position to shape the sustainable future of our industry. To be successful we must anticipate the needs of our customers, reducing the cost of energy delivery today and pioneering the flexible energy systems of tomorrow. This requires us to deliver on our promises and always look for new opportunities to grow, both ourselves and our business.

At National Grid, we work towards the highest standards in everything we do, including how we support, value and develop our people. Our aim is to encourage and support employees to thrive and be the best they can be. We celebrate the difference people can bring into our organisation, and welcome and encourage applicants with diverse experiences and backgrounds, and offer flexible and tailored support, at home and in the office. Our goal is to drive, develop and operate our business in a way that results in a more inclusive culture. All employment is decided on the basis of qualifications, the innovation from diverse teams & perspectives and business need. We are committed to building a workforce so we can represent the communities we serve and have a working environment in which each individual feels valued, respected, fairly treated, and able to reach their full potential.