Role Summary
The Internal Audit Manager - IT will be a trusted business partner, who will work closely with stakeholders across the three lines of defences, namely leadership teams in the first line technology division, second line information security and risk functions and occasionally external parties. The role will have significant exposure to the business to help deliver the business’s ambitious growth agenda within a controlled environment.
In this role, you will be a key strategic partner to the Head of Internal Audit, helping shape our technology assurance strategy and annual audit planning.
Location
- London Vicotria - 4 days in the office, 1 day of home office per week
- There may be a limited degree of travel required to both Europe and other jurisdictions.
Key Responsibilities
- Lead End-to-End IT Audits: Plan, execute, and report on internal audits across infrastructure, cybersecurity, cloud platforms, and product led initiatives.
- Annual Risk Assessment & Planning: Partner with the Chief Internal Auditor and Head of Internal Audit in conducting the annual IT risk assessment and contribute to the development of the annual internal audit plan.
- Stakeholder Engagement: Build strong, trust-based relationships across business functions to ensure a collaborative and forward-looking audit practice.
- Technology Assurance Framework: Help define and enhance a technology assurance strategy aligned with IIA standards and industry best practices (e.g. ISO27001, NIST, COBIT).
- Regulatory Insight: Stay informed on evolving regulations (e.g. FCA PS21/3, DORA), and other industry developments impacting operational resilience and technology risk.
- Innovation & Curiosity: Proactively research emerging technologies, risks, and control solutions, maintaining a learning mindset and bringing new ideas to the audit approach.
What we’re looking for
- Proven experience managing and delivering IT internal audits in regulated industries or FinTech environments.
- Experience auditing or working in the First or Second Line of Defense IT, information security and operational risk functions.
- Knowledge of risk based auditing and risk management frameworks (e.g. ISO27001, NIST, COBIT, COSO).
- Able to work independently in a fast changing business environment and manage shifts in priorities.
- Ability to apply analytics, process automation and develop a data driven internal audit approach.
- Relevant professional certifications or industry accreditations (CISA, CISM, CIA, CISSP, AWS or GCP certifications etc.)
- Exposure to cloud environments (e.g. AWS, GCP), including knowledge of cloud security principles would be a plus.
- Demonstrated experience in third-party / vendor risk management and assurance reviews would be a plus.
- Degree qualified in computer science, information security, engineering or a quantitative discipline would be a plus.
About Us
Ebury is a FinTech success story, positioned among the fastest-growing international companies in its sector.
Founded in 2009, we are headquartered in London and have more than 1700 staff with a presence in more than 29 markets worldwide. Cultural diversity is part of what makes Ebury a special place to be. From Sao Paulo to Dubai, Vancouver to Auckland, we enjoy sharing team experiences and celebrating success across the Ebury family.
Hard work pays off: in 2019, Ebury received a £350 million investment from Banco Santander and has won internationally recognised awards including Financial Times: 1000 Europe's Fastest-Growing Companies.
None of this would have been possible without our proudest achievement: our great people. Enthusiastic, innovative and collaborative teams, always ready to disrupt and revolutionise the fast-paced FinTech sector.
At Ebury, we’re committed to building a workplace where everyone feels valued, supported, and empowered to thrive. We’re proud to have active employee networks and ESG initiatives that reflect our inclusive culture, including our Women’s Network, LGBTQIA+ Network, and Veterans Network. These communities provide spaces for connection, mentorship, advocacy, and collaboration across our global teams.
We believe in inclusion. We stand against discrimination in all forms and have no tolerance for the intolerance of differences that makes us a modern and successful organisation. At Ebury, you can be whoever you want to be and still feel a sense of belonging no matter your story because we want you and your uniqueness to help write our future.