Job Search

An Interim Cyber Security Internal Auditor is required to provide independent assurance over the organisation’s information security, technology and cyber risk controls. The successful candidate will assess the design and operating effectiveness of controls, identify vulnerabilities and evaluate whether processes align with relevant policies, regulatory expectations and recognised frameworks.

Key responsibilities will include planning and delivering risk-based internal audits across areas such as access management, identity and privilege controls, vulnerability management, incident response, security monitoring, data protection, third-party risk, business continuity and cloud security. You will conduct interviews, review documentation and technical evidence, perform control testing and analyse findings to determine the potential impact and root cause of any weaknesses.

You will prepare clear and well-supported audit reports, setting out conclusions, risks and practical recommendations for improvement. The role will also involve discussing findings with control owners and senior stakeholders, agreeing appropriate management actions, monitoring remediation activity and providing regular updates on progress. Where required, you may contribute to wider assurance reviews, risk assessments and the development of the annual audit plan.

Applicants should have proven experience in cyber security, information technology or internal audit, ideally gained within a complex or highly regulated environment. A strong understanding of recognised frameworks and standards, such as ISO 27001, NIST, COBIT or the Cyber Assessment Framework, is desirable. Experience of auditing technical controls and translating complex issues into concise, business-focused reports is essential.

You will need excellent analytical, written and verbal communication skills, together with the confidence to challenge constructively and work effectively with stakeholders at all levels. Professional qualifications such as CISA, CISSP, CRISC, CIA or equivalent experience would be advantageous. The interim nature of the appointment requires someone who can quickly understand the environment, build effective working relationships and deliver high-quality assurance within agreed timescales.

An experienced IT Security Auditor is sought to assess, strengthen and improve information security controls across a complex technology environment. This role will provide independent assurance that systems, processes and controls are designed and operating effectively, while helping to identify opportunities to reduce cyber risk and support regulatory compliance.

Key responsibilities will include planning and delivering risk-based IT and information security audits, reviewing access controls, infrastructure, cloud services, applications, networks, data protection and third-party arrangements. You will conduct interviews, examine documentation, analyse technical evidence and test controls against recognised frameworks and applicable legislation. The role will also involve evaluating incident management, vulnerability management, change control, business continuity and disaster recovery arrangements.

You will prepare clear, well-evidenced audit reports, highlighting control weaknesses, root causes, risk implications and practical recommendations. Working with control owners and senior stakeholders, you will agree remediation plans, monitor progress and validate completed actions. You may also contribute to risk assessments, policy reviews, security projects and continuous improvement initiatives, providing constructive challenge while maintaining effective working relationships across technical and non-technical teams.

Applicants should have proven experience in IT audit, information security, cyber risk or a closely related discipline, together with a sound understanding of security principles, governance and control frameworks. Familiarity with standards such as ISO 27001, COBIT, NIST or CIS Controls is desirable, as is experience auditing cloud environments and suppliers. A relevant professional qualification, such as CISA, CISSP, CISM or equivalent experience, would be advantageous.

You will need strong analytical and report-writing skills, excellent attention to detail and the confidence to communicate findings clearly at all levels. The successful candidate will be organised, pragmatic and capable of managing competing priorities while maintaining independence, professional judgement and confidentiality.

We are seeking an experienced Managing Cyber Security Auditor to lead and develop a high-performing audit function within a complex, technology-driven environment. This role will provide independent assurance over cyber security controls, information risk management and regulatory compliance, while supporting the continuous improvement of security governance and operational resilience. You will work closely with senior stakeholders, technology teams and control owners to assess the effectiveness of security arrangements and communicate key risks clearly.

Responsibilities will include developing and maintaining a risk-based cyber security audit plan; managing audits from scoping and fieldwork through to reporting and follow-up; and reviewing controls across areas such as identity and access management, cloud security, vulnerability management, incident response, data protection, third-party risk and security operations. You will lead audit teams and external specialists where required, provide constructive challenge to control owners, validate remediation activity and ensure findings are appropriately prioritised. The role will also involve preparing concise reports and presentations for senior governance forums, monitoring emerging threats and regulatory developments, and contributing to the ongoing enhancement of audit methodologies, policies and assurance frameworks.

Applicants should have substantial experience in cyber security audit, information security assurance, technology risk or a closely related discipline, including experience managing complex audits and engaging senior stakeholders. A strong understanding of recognised security and control frameworks, such as ISO 27001, NIST, COBIT or CIS Controls, is essential, along with knowledge of relevant data protection and cyber security regulations. Professional qualifications such as CISA, CISSP, CISM, CRISC or equivalent are desirable. You will need excellent analytical, report-writing and communication skills, sound professional judgement and the ability to translate technical issues into clear business risks. Experience leading people, managing competing priorities and working independently in a changing environment would also be highly valued.

We are seeking an experienced Information Security Lead Auditor to plan, lead and deliver independent security audits across a complex technology and business environment. This role will assess the effectiveness of information security controls, governance frameworks, risk management practices and regulatory compliance arrangements. You will work closely with stakeholders across technology, operations, risk and compliance to identify control weaknesses, evaluate their impact and support the development of practical remediation plans.

Responsibilities will include developing risk-based audit plans; defining audit scope, objectives and testing strategies; conducting interviews, walkthroughs and evidence reviews; and assessing controls against recognised standards and regulations such as ISO 27001, NIST, COBIT, PCI DSS and applicable privacy requirements. You will lead audit engagements from planning through to reporting, document clear and well-supported findings, agree actions with control owners and monitor remediation through to completion. The role will also involve presenting results to senior management, contributing to assurance reporting and advising on emerging information security risks, technology changes and regulatory developments.

Applicants should have substantial experience in information security auditing, IT assurance, risk management or a closely related discipline, together with a strong understanding of security governance, identity and access management, vulnerability management, incident response, cloud security, data protection and third-party risk. A relevant professional certification such as CISA, CISSP, CRISC, ISO 27001 Lead Auditor or an equivalent qualification is highly desirable. You will need excellent analytical, written and verbal communication skills, sound professional judgement and the confidence to challenge constructively at all levels. The successful candidate will be organised, objective and detail-oriented, with the ability to manage multiple priorities, work independently and build effective relationships in a collaborative environment.