Senior Internal Audit Manager - Technology

Ebury London Victoria Office - Hybrid: 4 days in the office, 1 day working from home per week

Role Summary

The Senior Internal Audit Manager - Technology is responsible for leading the delivery of technology cyber-related, and third-party audit activity across the Ebury Group. The role provides independent assurance over IT risks, information security, operational resilience and technology-enabled business processes, while building and leading a high-performing technology audit capability within Group Internal Audit.

In this role, you will be a key strategic partner to the Chief Auditor, helping shape our technology assurance strategy and annual audit planning. You will also lead the development of a continuous third-party assurance framework to monitor the ongoing performance and risk of external service providers.

• There may be a limited degree of travel required to both Europe and other jurisdictions.

Audit Delivery and Assurance

• Lead the planning, execution and reporting of technology and cyber audits across the Group, including infrastructure, cloud, application security, identity and access management, data protection and IT operations.
• Deliver audits in line with Group Internal Audit methodology, professional standards and regulatory expectations.
• Perform risk assessments to identify high-risk technology areas and emerging risk themes.
• Produce clear, high-quality audit reports with practical, risk-based recommendations for senior management.
• Track, validate and challenge management actions to ensure timely and effective remediation of audit findings.

Technology Risk Coverage

• Provide audit coverage across key technology risk domains including:
• Cyber security and information security controls
• Cloud and third-party hosted environments
• Operational resilience and IT continuity
• Data governance and protection
• Identity and access management
• Change management and SDLC controls
• IT service management and asset management
  
  

Team Leadership and Capability Building

• Build, lead and develop the technology audit capability within Group Internal Audit.
• Provide day-to-day leadership, coaching and technical guidance to the audit team.
• Allocate work effectively across the team to ensure timely delivery and appropriate skill utilisation.
• Review audit workpapers and deliverables to ensure quality, consistency and adherence to professional standards.
• Support recruitment, onboarding and training of new team members where required.
• Develop audit methodologies, templates and technical guidance to improve audit efficiency and consistency.
• Foster a culture of continuous improvement, knowledge sharing and high performance within the team.
  
  

Stakeholder Management

• Act as a senior point of contact for Technology, Security, Risk and Compliance stakeholders.
• Build strong working relationships with senior management to ensure audit activity is well understood and appropriately scoped.
• Provide constructive challenge while maintaining a collaborative and pragmatic approach.
• Present audit results, risk themes and progress updates to senior leadership and governance forums.
  
  

Audit Planning and Strategy

• Support the development of the annual and multi-year technology audit plan based on risk assessment, regulatory priorities and business change.
• Identify opportunities to enhance audit coverage through thematic reviews, data analytics and automation.
  Contribute to the continuous improvement of Group Internal Audit processes and practices.
  
  

Regulatory and External Engagement

• Ensure audit activity aligns with relevant regulatory requirements and industry frameworks such as FCA operational resilience, DORA, ISO 27001, NIST and COBIT.
• Support interactions with external auditors, regulators and third-party assurance providers where required.
  
  

Key Skills and Experience

Essential

• Significant experience in technology audit, IT risk or information security within financial services or regulated environments.
• Proven experience leading teams or mentoring auditors in a professional services or in-house audit environment.
• Strong understanding of technology risk and control frameworks.
• Experience delivering end-to-end audits and managing a portfolio of audits independently.
• Ability to translate complex technical issues into clear, actionable insights for senior stakeholders.
• Strong organisational and stakeholder management skills.

Desirable

• Experience with cloud platforms such as AWS or GCP.
• Knowledge of operational resilience and regulatory change programmes.
• Professional certifications such as CISA, CISSP, CISM or equivalent.
• Experience working in fast-growth or scale-up organisations.

Why Ebury?

• Competitive Starting Salary with an annual discretionary bonus that truly rewards your performance from day one.
• Dedicated Mentorship: Learn directly from experienced managers who are invested in your success.
• Cutting-Edge Technology: Leverage state-of-the-art tailor made tools and systems that enable you to perform at your best.
• Clear, Accelerated Career Progression: Defined pathways to leadership and specialist roles within Ebury.
• Dynamic & Supportive Culture: Work in a collaborative environment where teamwork and personal growth are prioritized.
• Generous Benefits Package: Access competitive benefits tailored to your location, which typically include health care and social benefits.
• Central Office: A fantastic location with excellent transport links.

Ready to launch your career with a global FinTech? Click the ‘Apply’ Today and discover your potential at Ebury!

Internal Audit Manager - Third Parties Assurance and Business Resilience

Ebury Madrid Office - Hybrid: 4 days in the office, 1 day working from home per week

Role Summary:

We are seeking an experienced and driven Internal Audit Manager to lead and execute third-party and business resilience audits across our growing organisation. This is a critical and high-impact role for someone who thrives on autonomy, has a strong understanding of third-party and resilience risk, and is passionate about delivering value-added assurance in a dynamic environment.

In this role, you will be a key strategic partner to the Head of Internal Audit, helping shape our assurance strategy and annual audit planning. You will also lead the development of a continuous third-party assurance framework to monitor the ongoing performance and risk of external service providers.

Key Responsibilities

• Lead Risk-Based Audits: Plan, execute, and report on internal audits focused on third-party management, outsourcing governance, operational resilience and business continuity.
• Third Party Assurance: Design and implement a continuous monitoring framework to assess third-party risk and compliance, with a focus on regulatory and contractual obligations.
• Stakeholder Engagement: Build strong, trust-based relationships across business functions to ensure a collaborative and forward-looking audit practice.
• Annual Risk Assessment & Planning: Partner with the Chief Internal Auditor and Head of Internal Audit in conducting the annual risk assessment and contribute to the development of the annual internal audit plan.
• Professional Practices: Support audit methodology enhancement, including integration of third-party risk considerations across the audit universe. Promote collaboration and continuous improvement within the Internal Audit function.
• Regulatory Insight: Stay informed on evolving regulations (e.g. FCA PS21/3, DORA), and other industry developments impacting operational resilience and technology risk.
• Innovation & Curiosity: Proactively research emerging technologies, risks, and control solutions, maintaining a learning mindset and bringing new ideas to the audit approach.

What we’re looking for

• Proven experience in internal audit, risk, or assurance roles within financial services is essential.
• Demonstrated experience in third-party / vendor risk management and assurance reviews is essential.
• Experience auditing or working in the First or Second Line of Defense IT, information security and operational risk functions.
• Knowledge of operational resilience regulations, such as FCA operational resilience and DORA.
• Ability to produce clear, concise, and insightful audit reports.
• Able to work independently in a fast changing business environment and manage shifts in priorities.
• Relevant professional certifications such as CIA, ACA, CISA or equivalent
• Exposure to cloud environments (e.g. AWS, GCP), including knowledge of cloud management principles would be a plus.