Senior Auditor - Global IT Audit & Risk

Job Summary

Part of the Global IT Audit team, delivering independent assurance over Digital and IT risk across the business. Responsible for independently delivering assigned IT audit workstreams and supporting audit planning and delivery.

Purpose

Support the Group in meeting its strategic objectives by championing best practice in risk management, governance and controls. Contribute to the independent assurance and guidance provided by Global Audit Risk to senior management, the Board and the Audit Committee on the adequacy and effectiveness of the Groups control environment. Support the business in optimising controls and process efficiency, protecting value and supporting growth, and support the function in delivering its agreed objectives and meeting KPIs.

Responsibilities

• Independently perform audit fieldwork with limited supervision, producing clear, concise and appropriately evidenced workpapers that meet GAR methodology and enable an experienced auditor to understand and reperform the work.
• Contribute to audit scoping, risk assessment and the development and delivery of audit test plans and workpapers, bringing insight from relevant technology risks and controls.
• Develop well-supported audit observations and test results, clearly articulating the evidence, root cause, risk and practical recommendations for review by the Audit Lead.
• Support in audit action tracking completion through engagement with action owners and review evidence to satisfy closure.
• Work alongside Diageo s Internal Audit co-sourcing providers to effectively deliver specialist IT audit reviews as part of the IT audit plan.
• Ensure all work is performed and documented in compliance with established methodologies, IA standards and codes.
• Understand the key Digital and IT strategies and risks of Diageo and how they relate to Internal Audit s work and overall plan, including both central IT and Operational Technology.
• Develop and maintain effective relationships with key IT stakeholders and auditees throughout each audit to facilitate delivery and ensure Internal Audit remains a relevant, valued business partner.
• Contribute to wider improvement initiatives in the Global Audit Risk function such as those related to ways of working and team development.
• Support less experienced colleagues through day-to-day knowledge sharing and informal guidance where appropriate.

Measures of success

• Accuracy, timeliness, quality and commercial relevance of audit work.
• Effective relationships with key stakeholders and team members.
• Delivery of assigned audit workstreams to agreed scope, quality and timelines.
• 360 Feedback from staff, peers and senior management in the department and the business.

Skills / Competencies

• Proven track record of working co-operatively with others to achieve objectives, displaying an understanding of group dynamics, being a team player, being collegial and collaborative, open and non-territorial
• Strong verbal and written communication skills, demonstrated in both day-to-day work and in formal meetings and correspondence.
• Good working knowledge of current and emerging IT controls and risks, including cybersecurity, cloud, data/AI, ERP and third-party technology risks where relevant to the audit scope.
• Ability to independently assess evidence and clearly articulate observations, root causes, risks and recommendations for review by the Audit Lead.
• Proactively owns discrete or significant work packages, manages competing priorities and delivers audit work efficiently and to the required standard.
• Displays ability to self-asses s own performance and take steps to actively improve performance.
• Demonstrates flexible, objective, lateral thinking.
• Can operate comfortably in an environment that is subject to frequent change.
• Strong knowledge of audit documentation, evidence and workpaper quality standards.

Qualifications / experience required

• Typically 4+ years relevant experience in IT audit, technology risk, controls or compliance within a large/global organisation, professional services firm or equivalent environment
• Relevant degree, professional qualification (e.g. CISA, CIA) or demonstrable equivalent professional experience.
• Strong working knowledge and practical audit experience across core Digital IT risk domains, including IT applications, cybersecurity/information security, infrastructure/cloud and IT management, with deeper expertise in one or more areas.
• Strong knowledge of and practical auditing experience with relevant IT and security frameworks (e.g. COBIT, ITIL, ISO 270

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.