IT Security Auditor

Reference: vdlu70xwvz3f489l0m2g

An experienced IT Security Auditor is sought to assess, strengthen and improve information security controls across a complex technology environment. This role will provide independent assurance that systems, processes and controls are designed and operating effectively, while helping to identify opportunities to reduce cyber risk and support regulatory compliance.

Key responsibilities will include planning and delivering risk-based IT and information security audits, reviewing access controls, infrastructure, cloud services, applications, networks, data protection and third-party arrangements. You will conduct interviews, examine documentation, analyse technical evidence and test controls against recognised frameworks and applicable legislation. The role will also involve evaluating incident management, vulnerability management, change control, business continuity and disaster recovery arrangements.

You will prepare clear, well-evidenced audit reports, highlighting control weaknesses, root causes, risk implications and practical recommendations. Working with control owners and senior stakeholders, you will agree remediation plans, monitor progress and validate completed actions. You may also contribute to risk assessments, policy reviews, security projects and continuous improvement initiatives, providing constructive challenge while maintaining effective working relationships across technical and non-technical teams.

Applicants should have proven experience in IT audit, information security, cyber risk or a closely related discipline, together with a sound understanding of security principles, governance and control frameworks. Familiarity with standards such as ISO 27001, COBIT, NIST or CIS Controls is desirable, as is experience auditing cloud environments and suppliers. A relevant professional qualification, such as CISA, CISSP, CISM or equivalent experience, would be advantageous.

You will need strong analytical and report-writing skills, excellent attention to detail and the confidence to communicate findings clearly at all levels. The successful candidate will be organised, pragmatic and capable of managing competing priorities while maintaining independence, professional judgement and confidentiality.

£40,000.00 - £50,000.00
Per annum
Added 02/11/2026
Reference: vdlu70xwvz3f489l0m2g

Other similar jobs

Interim Cyber Security Internal Auditor

Added 02/11/2026

An Interim Cyber Security Internal Auditor is required to provide independent assurance over the organisation’s information security, technology and cyber risk controls. The successful candidate will assess the design and operating effectiveness of controls, identify vulnerabilities and evaluate whether processes align with relevant policies, regulatory expectations and recognised frameworks. Key responsibilities will include planning and delivering risk-based internal audits across areas such as access management, identity and privilege controls, vulnerability management, incident response, security monitoring, data protection, third-party risk, business continuity and cloud security. You will conduct interviews, review documentation and technical evidence, perform control testing and analyse findings to...

Learn more

Managing Cyber Security Auditor

Added 20/10/2026

We are seeking an experienced Managing Cyber Security Auditor to lead and develop a high-performing audit function within a complex, technology-driven environment. This role will provide independent assurance over cyber security controls, information risk management and regulatory compliance, while supporting the continuous improvement of security governance and operational resilience. You will work closely with senior stakeholders, technology teams and control owners to assess the effectiveness of security arrangements and communicate key risks clearly. Responsibilities will include developing and maintaining a risk-based cyber security audit plan; managing audits from scoping and fieldwork through to reporting and follow-up; and reviewing controls across...

Learn more

Information Security Lead Auditor

Added 11/09/2026

We are seeking an experienced Information Security Lead Auditor to plan, lead and deliver independent security audits across a complex technology and business environment. This role will assess the effectiveness of information security controls, governance frameworks, risk management practices and regulatory compliance arrangements. You will work closely with stakeholders across technology, operations, risk and compliance to identify control weaknesses, evaluate their impact and support the development of practical remediation plans. Responsibilities will include developing risk-based audit plans; defining audit scope, objectives and testing strategies; conducting interviews, walkthroughs and evidence reviews; and assessing controls against recognised standards and regulations such as...

Learn more

ISO 27001 Consultant & Auditor – Defence Cyber Certification

Added 14/09/2026

We are seeking an experienced ISO 27001 Consultant & Auditor to support organisations operating in the defence and wider security-sensitive sectors. This role will involve helping clients establish, improve and maintain robust information security management systems (ISMS) aligned with ISO/IEC 27001 and relevant defence cyber certification requirements. You will work with stakeholders at all levels to assess current controls, identify risks and develop practical, proportionate solutions that meet regulatory, contractual and operational expectations. Key responsibilities will include planning and delivering ISO 27001 gap assessments, internal audits, readiness reviews and certification support engagements. You will document findings, assess corrective actions and...

Learn more

Security Operations Engineer, AWS Security Cloud Response, Amazon Security Cloud Security Response

Added 14/10/2026

We are seeking a Security Operations Engineer to support cloud security response activities in a fast-paced, highly distributed environment. In this role, you will help protect cloud infrastructure, services, and customer data by investigating security events, coordinating incident response, and improving detection and response capabilities. You will work closely with security engineering, infrastructure, software development, and operations teams to identify threats, contain incidents, and reduce the likelihood of recurrence. Your responsibilities will include monitoring and analysing security alerts, conducting technical investigations, triaging suspected compromises, and supporting the full incident management lifecycle. You will develop and maintain incident response procedures, playbooks,...

Learn more

Senior Application Security Engineer - Product Security & DevSecOps

Added 30/10/2026

We are seeking a Senior Application Security Engineer to help strengthen product security across the software development lifecycle. This is an influential role for an experienced security professional who can combine hands-on technical expertise with the ability to engage effectively with engineering, architecture, product and operations teams. You will help define and deliver a comprehensive application security and DevSecOps strategy, embedding security into development processes from design through to deployment. Responsibilities will include conducting threat modelling and security reviews, identifying vulnerabilities, assessing risk and supporting teams in implementing effective remediation. You will also contribute to secure coding standards, security architecture...

Learn more

Principal Security SA, AWS Industries Tech, Security Specialists

Added 29/10/2026

We are seeking a Principal Security Solutions Architect to provide technical leadership across complex, industry-focused security initiatives. This is a senior role for an experienced security professional who can shape strategy, design resilient solutions and work confidently with technical and executive stakeholders. You will help organisations address evolving cyber risks while enabling secure adoption of cloud, data and digital technologies. You will lead the architecture and design of security solutions across areas such as identity and access management, infrastructure protection, application security, data protection, threat detection, governance and compliance. Working from business and technical requirements, you will produce practical architectures,...

Learn more

Security Engineer (Corporate Security), London

Added 26/10/2026

An experienced Security Engineer is required to support the design, implementation and operation of corporate security systems across a complex, multi-site environment in London. This is an opportunity to work with a range of stakeholders to protect people, premises, information and critical business operations through effective, technology-led security solutions. The successful candidate will be responsible for managing and maintaining physical security technologies, including access control, CCTV, intruder detection, intercoms, visitor management and associated monitoring platforms. You will support the delivery of security engineering projects, from requirements gathering and system design through to installation, testing, commissioning and handover. The role will...

Learn more

GRC Security Consultant - Operational Security

Added 23/10/2026

We are seeking a GRC Security Consultant – Operational Security to support the development, implementation and continual improvement of security governance, risk and compliance activities. This role will work closely with technical and business stakeholders to ensure that operational security practices are effective, proportionate and aligned with relevant policies, standards and regulatory obligations. You will assess security risks across operational processes, systems and services, documenting findings and working with control owners to agree practical remediation plans. Responsibilities will include supporting risk assessments, maintaining security registers, reviewing policies and procedures, monitoring control performance and preparing clear reports for management and governance...

Learn more

Cyber Security Specialist (Security Connector)

Added 22/10/2026

We are seeking a Cyber Security Specialist (Security Connector) to support the coordination, delivery and continuous improvement of cyber security activities across a complex technology and business environment. This role will act as a key link between security teams, technology functions and business stakeholders, helping to translate security requirements into practical, risk-based solutions. You will build effective relationships with internal teams and relevant third parties, promote secure working practices and provide clear advice on cyber security risks. Responsibilities will include supporting security assessments, reviewing proposed changes and solutions, tracking remediation activity, and ensuring that security controls are appropriately implemented and...

Learn more

Security Operations Engineer, AWS Security Cloud Response

Added 21/10/2026

We are seeking a Security Operations Engineer, AWS Security Cloud Response to help protect cloud environments, investigate security events and strengthen operational resilience. This role will suit an experienced security professional who is confident working across AWS services, responding to incidents and collaborating with technical teams in a fast-paced environment. You will monitor and investigate alerts from cloud security, identity, endpoint and network monitoring tools, assessing potential threats and coordinating appropriate responses. Responsibilities will include triaging incidents, conducting root-cause analysis, containing and remediating security issues, and maintaining accurate case records. You will also contribute to threat hunting, vulnerability investigations and...

Learn more

Security Assurance Specialist, Security Assurance

Added 21/10/2026

We are seeking a Security Assurance Specialist to support the delivery of effective security governance, risk management and assurance across a complex technology and business environment. This role will help ensure that security controls are appropriately designed, implemented and operating effectively, while promoting a practical, risk-based approach to information security. You will plan and conduct security assurance reviews, control assessments and compliance activities across systems, services, suppliers and business processes. Responsibilities will include gathering and evaluating evidence, identifying control weaknesses, documenting findings and agreeing proportionate remediation plans with relevant stakeholders. You will monitor actions through to completion and provide clear,...

Learn more

Senior Engineering Manager, AI Security, Global Security & Defence

Added 19/10/2026

We are seeking a Senior Engineering Manager to lead the development of advanced AI security capabilities within a global security and defence environment. This is a senior leadership role combining technical direction, engineering management and strategic delivery. You will be responsible for building and guiding high-performing, multidisciplinary teams working on the secure design, deployment and operation of artificial intelligence and machine-learning systems. You will define engineering strategy and roadmaps for AI security, ensuring that products and platforms are resilient, trustworthy and capable of operating in complex, high-risk environments. Your responsibilities will include leading the development of threat models, security controls,...

Learn more

Staff / Principal Security Engineer, AI Safety and Security

Added 19/10/2026

We are seeking a Staff or Principal Security Engineer specialising in AI safety and security to help shape the secure development, deployment and operation of advanced artificial intelligence systems. You will work at the intersection of cybersecurity, machine learning and risk management, identifying emerging threats and developing practical safeguards that support responsible innovation. This is a highly collaborative role, partnering with researchers, software engineers, infrastructure teams, product specialists and senior stakeholders to establish security principles across the AI lifecycle. Your responsibilities will include assessing threats to models, training pipelines, data, agents, applications and supporting infrastructure; designing controls to reduce risks...

Learn more

Senior Security Engineer, AWS Security Verification & Validation Team

Added 14/10/2026

We are seeking a Senior Security Engineer to join a specialist Security Verification and Validation team responsible for assessing the resilience, security, and compliance of complex cloud-based services. In this role, you will help identify security weaknesses before they can affect customers, strengthen defensive controls, and promote secure engineering practices across a large-scale technology environment. You will work closely with software engineers, architects, incident responders, and risk specialists to evaluate systems throughout their development and operational lifecycles. Your responsibilities will include designing and executing security assessments, threat modelling exercises, penetration tests, architecture reviews, and control validation activities. You will investigate...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.