Scope of Job

Part of the Global IT Audit team, delivering independent assurance over Digital and IT risk across the business. Responsible for independently delivering assigned IT audit workstreams and supporting audit planning and delivery.

Purpose

Support the Group in meeting its strategic objectives by championing best practice in risk management, governance and controls. Contribute to the independent assurance and guidance provided by Global Audit & Risk to senior management, the Board and the Audit Committee on the adequacy and effectiveness of the Group's control environment. Support the business in optimising controls and process efficiency, protecting value and supporting growth, and support the function in delivering its agreed objectives and meeting KPIs.

Responsibilities

• Independently perform audit fieldwork with limited supervision, producing clear, concise and appropriately evidenced workpapers that meet GAR methodology and enable an experienced auditor to understand and reperform the work.
• Contribute to audit scoping, risk assessment and the development and delivery of audit test plans and workpapers, bringing insight from relevant technology risks and controls.
• Develop well-supported audit observations and test results, clearly articulating the evidence, root cause, risk and practical recommendations for review by the Audit Lead.

• Support in audit action tracking completion through engagement with action owners and review evidence to satisfy closure.

• Work alongside Diageo’s Internal Audit co-sourcing providers to effectively deliver specialist IT audit reviews as part of the IT audit plan.

• Ensure all work is performed and documented in compliance with established methodologies, IA standards and codes.
• Understand the key Digital and IT strategies and risks of Diageo and how they relate to Internal Audit’s work and overall plan, including both central IT and Operational Technology.
• Develop and maintain effective relationships with key IT stakeholders and auditees throughout each audit to facilitate delivery and ensure Internal Audit remains a relevant, valued business partner.
• Contribute to wider improvement initiatives in the Global Audit & Risk function such as those related to ways of working and team development.

• Support less experienced colleagues through day-to-day knowledge sharing and informal guidance where appropriate.

Measures of success:

• Accuracy, timeliness, quality and commercial relevance of audit work.
• Effective relationships with key stakeholders and team members.
• Delivery of assigned audit workstreams to agreed scope, quality and timelines.
• 360 Feedback from staff, peers and senior management in the department and the business.

Skills / Competencies:

• Proven track record of working co-operatively with others to achieve objectives, displaying an understanding of group dynamics, being a team player, being collegial and collaborative, open and non-territorial

• Strong verbal and written communication skills, demonstrated in both day-to-day work and in formal meetings and correspondence.

• Good working knowledge of current and emerging IT controls and risks, including cybersecurity, cloud, data/AI, ERP and third-party technology risks where relevant to the audit scope.

• Ability to independently assess evidence and clearly articulate observations, root causes, risks and recommendations for review by the Audit Lead.

• Proactively owns discrete or significant work packages, manages competing priorities and delivers audit work efficiently and to the required standard.

• Displays ability to self-assess own performance and take steps to actively improve performance.

• Demonstrates flexible, objective, lateral thinking.

• Can operate comfortably in an environment that is subject to frequent change.

• Strong knowledge of audit documentation, evidence and workpaper quality standards.

• Ability to build effective relationships with IT stakeholders and auditees, including confidently discussing evidence, control gaps and proposed findings.

Qualifications / experience required: 

Required

• Typically 4+ years' relevant experience in IT audit, technology risk, controls or compliance within a large/global organisation, professional services firm or equivalent environment

• Relevant degree, professional qualification (e.g. CISA, CIA) or demonstrable equivalent professional experience.

• Strong working knowledge and practical audit experience across core Digital & IT risk domains, including IT applications, cybersecurity/information security, infrastructure/cloud and IT management, with deeper expertise in one or more areas.

• Strong knowledge of and practical auditing experience with relevant IT and security frameworks (e.g. COBIT, ITIL, ISO 27001).

• Experience delivering risk-based audit assurance, including planning, testing, control evaluation and audit report writing.
• Experience delivering IT audits using data analytics to generate meaningful insights and support audit conclusions.

Desirable

• Industry relevant experience
• Experience working with third-party co-source provider resources
• Experience working in a global organisation operating across multiple geographies.
• Knowledge of SAP S/4, cybersecurity, cloud, data/AI or other relevant emerging technology controls.
• Experience leveraging AI across the audit lifecycle to improve the efficiency, quality or insight of audit activity.

About us

With over 200 brands sold in nearly 180 countries, Diageo is home to some of the world’s most iconic drinks. From Johnnie Walker and Guinness to Tanqueray, Smirnoff and Don Julio, we craft brands chosen for life’s moments — from everyday connections to landmark celebrations.

Bring your talent, curiosity and ambition, and strive for your personal best alongside people who challenge, support and learn from each other. Together, as one outstanding team, we keep learning, improving and raising the bar for our brands, our business and each other.

Join us and play your part in making life’s moments mean a little more.

About the Function:    

About the role: 

Experience / skills required: 

Working with us
Flexibility is key to our success. Talk to us about what flexibility means to you, so that you’re supported to manage your wellbeing and balance your priorities from day one. 

We recognise and value performance, offering our people a highly competitive Rewards and Benefits package including:

Our purpose is crafting iconic drinks chosen for life’s moments. And it’s our people, with their different experiences, perspectives and talents, who make that possible.

We value diversity in its broadest sense and want everyone to feel they can belong, contribute and strive for their personal best. You’ll work alongside people with different backgrounds, experiences and perspectives — challenging, supporting and learning from one another as one outstanding team.

Together, we’re constantly learning and improving, combining the strength of our people, capabilities and iconic brands to raise the bar, grow and win. Wherever you join us, you’ll have the opportunity to contribute, make an impact and play your part in making life’s moments mean a little more.

Ready to bring your best? This could be your opportunity. 

If you require a reasonable adjustment, please ensure that you capture this information when you submit your application. 

Recruitment Scam Warning

Protecting candidates is very important to us. All communications regarding your application will come from an email address ending in @diageo.com. In our recruitment process, we'll never ask for money.