Technology and Cyber Security Risk Audit Lead

Reference: 3ixbl7yu0ws7mi1hwl4x

We are seeking a Technology and Cyber Security Risk Audit Lead to provide independent assurance over the effectiveness of technology, information security and cyber risk management practices. This is a senior role for an experienced audit professional who can combine strong technical understanding with commercial awareness, sound judgement and the ability to influence stakeholders at all levels. You will help shape risk-based audit plans, identify emerging threats and provide practical recommendations that strengthen governance, resilience and regulatory compliance.

Key responsibilities will include leading complex audits across areas such as cyber security, IT infrastructure, cloud services, identity and access management, data protection, third-party risk, business continuity and technology change. You will define audit scope and objectives, assess key controls, review policies and procedures, analyse technical and operational evidence, and oversee testing performed by audit team members or external specialists. You will prepare clear, concise reports for senior management and relevant governance committees, agree appropriate management actions, and monitor the timely remediation of identified issues. The role will also contribute to continuous improvement of audit methodology, risk assessment processes and the use of data analytics or other technology-enabled assurance techniques.

Applicants should have significant experience in technology, cyber security or IT risk auditing, ideally gained within a complex or regulated environment. A relevant professional qualification, such as CISA, CISSP, CRISC, CIA or an equivalent certification, is desirable. You will bring a strong understanding of recognised control frameworks and standards, such as ISO 27001, NIST, COBIT or ITIL, together with experience assessing cyber threats, control design and operating effectiveness. Excellent written and verbal communication skills are essential, as is the confidence to challenge constructively, build trusted relationships and explain complex issues to non-technical audiences. The successful candidate will be organised, analytical and collaborative, with a proactive approach to identifying risks and delivering high-quality assurance.

COMPETITIVE SALARY
Added 05/10/2026
Reference: 3ixbl7yu0ws7mi1hwl4x

Technology and Cyber Security Risk Audit Lead

Skipton, England, United Kingdom Permanent Risk Analyst

Other similar jobs

Technology and Cyber Security Risk Audit Lead

Added 21/08/2026

We are seeking an experienced Technology and Cyber Security Risk Audit Lead to oversee the assessment and management of technology and cybersecurity risks within our organization. In this role, you will be responsible for designing, implementing, and maintaining a robust audit framework that aligns with industry standards and regulatory requirements. You will lead audits focusing on IT systems, data protection, and information security, ensuring that vulnerabilities are identified and addressed proactively. Collaborating with cross-functional teams, you will provide expert guidance on risk management strategies and cultivate a culture of security awareness throughout the organization. Your responsibilities will include developing and...

Learn more

Senior Internal Audit Analyst, Technology and Cyber Risk

Added 21/08/2026

We are seeking a highly skilled Senior Internal Audit Analyst specializing in Technology and Cyber Risk to join our dynamic team. In this role, you will be responsible for conducting comprehensive audits of technology processes and systems, ensuring compliance with regulations and internal policies. You will assess the effectiveness of IT controls, identify areas of risk, and provide actionable recommendations to enhance operational efficiency and security posture. Your analytical skills will be crucial in evaluating complex data sets and translating findings into clear, concise reports for stakeholders. The ideal candidate will possess a deep understanding of technology and cybersecurity frameworks,...

Learn more

Senior Internal Audit Analyst, Technology and Cyber Risk

Added 19/08/2026

We are seeking a highly skilled Senior Internal Audit Analyst with expertise in Technology and Cyber Risk to join our dynamic team. In this role, you will be responsible for leading and executing comprehensive internal audit projects, focusing on technology and cyber risk assessments. You will evaluate the effectiveness of internal controls, compliance with regulations, and the overall risk management framework. Your analytical skills will be crucial in identifying vulnerabilities, assessing potential threats, and recommending actionable strategies to mitigate risks. As a Senior Internal Audit Analyst, you will collaborate with cross-functional teams to develop audit plans and ensure alignment with...

Learn more

Internal Audit Manager - Technology and Cyber Risk

Added 19/08/2026

We are seeking an experienced Internal Audit Manager with a focus on Technology and Cyber Risk to join our dynamic team. This role entails leading audits related to technology infrastructure, cybersecurity measures, and IT governance. The successful candidate will be responsible for assessing the effectiveness of technology controls, identifying vulnerabilities, and ensuring compliance with relevant regulations and standards. You will work closely with various stakeholders to develop audit plans, conduct risk assessments, and provide actionable recommendations to enhance the organization’s cybersecurity posture. Key responsibilities include overseeing the execution of audit projects, preparing detailed reports on findings, and presenting results to...

Learn more

Senior Consultant (Technology & Cyber Assurance), Technology and Transformation

Added 11/09/2026

We are seeking a Senior Consultant to join a Technology and Transformation team, providing trusted advice across technology risk, cyber security and assurance. This role will support clients in understanding and managing technology-related risks while helping them deliver effective, resilient and secure transformation programmes. You will work with senior stakeholders, technology leaders and delivery teams to assess current capabilities, identify areas for improvement and provide practical recommendations that support business objectives. Your responsibilities will include planning and delivering technology and cyber assurance reviews, evaluating governance frameworks, policies, controls and operating models, and assessing risks associated with technology change, cloud adoption,...

Learn more

Technology and Cybersecurity Assurance and Risk Manager

Added 15/10/2026

We are seeking an experienced Technology and Cybersecurity Assurance and Risk Manager to lead the development, coordination and continuous improvement of technology assurance, cybersecurity risk management and governance activities. You will provide independent oversight and constructive challenge across technology services, projects, suppliers and business change, helping to ensure that risks are identified, assessed, managed and reported effectively. Key responsibilities will include maintaining technology and cybersecurity risk frameworks, policies, standards and control requirements; conducting risk and control assessments; overseeing remediation plans; and preparing clear reports for senior stakeholders and relevant governance forums. You will support security assurance reviews, audit activity, regulatory...

Learn more

Security Program Manager, Exam and Audit

Added 18/09/2026

We are seeking a Security Program Manager, Exam and Audit to lead the planning, coordination, and continuous improvement of security assessment activities across the organisation. This role will manage examination and audit programmes, ensuring that internal controls, policies, procedures, and operational practices are prepared for review and aligned with applicable regulatory, contractual, and industry requirements. You will act as a central point of contact for auditors, examiners, control owners, and senior stakeholders, coordinating evidence collection, interview schedules, responses, and remediation tracking. Responsibilities include maintaining the security assessment calendar; defining programme milestones, deliverables, and dependencies; assessing audit readiness; and identifying risks...

Learn more

Technical Specialist (cyber related), Operational Risk and Resilience, R&CGI Operational Risk and Resilience Team - Insurance Directorate

Added 29/09/2026

We are seeking a Technical Specialist to support operational risk and resilience across the insurance sector, with a particular focus on cyber-related risks. You will contribute specialist technical insight to the assessment, monitoring and mitigation of risks that could affect the availability, integrity, confidentiality and continuity of important business services. Working as part of a collaborative operational risk and resilience team, you will engage with internal stakeholders, regulated firms and industry contacts to understand emerging threats, assess preparedness and promote effective risk management practices. Your responsibilities will include analysing cyber and technology risks, reviewing firms’ governance, controls and resilience arrangements,...

Learn more

Director, Technology and Cyber Risk Management

Added 05/10/2026

We are seeking an experienced Director, Technology and Cyber Risk Management to lead the development and execution of a comprehensive technology and cyber risk framework. This senior role will provide strategic direction, independent challenge and practical oversight across information technology, cybersecurity, data, third-party and operational resilience risks. You will work closely with executive leaders, technology teams, risk partners and business stakeholders to ensure that risk is understood, managed and reported effectively. Key responsibilities will include setting the technology and cyber risk management strategy; maintaining policies, standards, risk appetites and control frameworks; and overseeing the identification, assessment, treatment and monitoring of...

Learn more

Technology and Cyber Employee Platforms Risk - Executive Director

Added 18/09/2026

We are seeking an experienced Technology and Cyber Employee Platforms Risk Executive Director to lead the development and execution of risk management strategies across technology, cybersecurity, and employee-facing platforms. This senior role will provide independent challenge and expert guidance to technology and business leaders, ensuring that risks are identified, assessed, managed, and reported in line with regulatory expectations and organisational risk appetite. The successful candidate will operate across a complex, highly regulated environment and influence decisions at executive and board level. Key responsibilities include setting the strategic direction for technology and cyber risk oversight; maintaining effective risk and control frameworks;...

Learn more

Cyber Technology Risk Lead (Effectiveness & Engagement) - Government Digital Service - G7

Added 07/10/2026

We are seeking an experienced Cyber Technology Risk Lead to strengthen the effectiveness of cyber risk management across a complex, digitally enabled organisation. This role will provide trusted challenge, assurance and practical advice to senior stakeholders, helping teams identify, assess and manage technology and information security risks in line with organisational priorities, regulatory expectations and recognised industry standards. You will lead reviews of cyber and technology controls, assess the design and operating effectiveness of risk management processes, and provide clear recommendations for improvement. Responsibilities will include developing risk-based assurance plans; evaluating control frameworks, policies and procedures; analysing findings, incidents and...

Learn more

Cyber Technology Risk Lead (Effectiveness & Engagement)

Added 06/10/2026

We are seeking a Cyber Technology Risk Lead (Effectiveness & Engagement) to strengthen the organisation’s approach to technology and cyber risk management. In this role, you will provide independent challenge, practical guidance and constructive oversight across technology, information security and cyber risk activities. You will help assess whether key controls are appropriately designed and operating effectively, while promoting a strong risk-aware culture across technical and business teams. Key responsibilities will include developing and delivering technology risk effectiveness reviews, thematic assessments and control testing programmes; evaluating the design and operating effectiveness of cyber and technology controls; identifying emerging risks, vulnerabilities and...

Learn more

Certification and Assurance - Senior Security/Technology Risk Analyst

Added 20/08/2026

We are seeking a skilled and experienced Senior Security/Technology Risk Analyst to join our dynamic team. In this role, you will be responsible for identifying, assessing, and managing risks associated with technology and security across various platforms. You will conduct thorough risk assessments, ensuring compliance with regulatory requirements and internal policies. This includes evaluating the effectiveness of existing security controls and making recommendations for enhancements to safeguard our systems and data. You will also collaborate with cross-functional teams to implement security best practices and promote a culture of risk awareness within the organization. The ideal candidate will possess a deep...

Learn more

Junior Penetration Tester (audit)

Added 25/08/2026

We are seeking a Junior Penetration Tester (Audit) to support the assessment of information systems, applications, networks and cloud environments against recognised security standards and internal control requirements. Working under the guidance of experienced security professionals, you will help plan and deliver authorised penetration tests, vulnerability assessments and technical audits. You will contribute to defining test scope, reviewing available documentation, identifying potential attack paths and selecting appropriate testing techniques while maintaining a clear focus on safety, legality and agreed rules of engagement. Your responsibilities will include conducting reconnaissance and security testing, validating vulnerabilities, gathering clear evidence and documenting findings in...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.