Internal Audit (VP & AVP Level) - Tech, Risk & Controls

Vice President, Internal Audit – Technology, Risk & Controls (London)

*No sponsorship i'm afraid.

Internal Audit gets a bad rap. “Tick-box.” “Back-office.” “The people who show up once a year to make sure we haven’t completely lost the plot.”

But not here.

This isn’t about poking holes in processes just for the sake of it. This is about having the clout, credibility, and technical expertise to challenge the tech stack, influence the decision-makers, and actually shift risk profiles - not just report on them.

We’re hiring a Vice President and an Associate Vice President in our Internal Audit department to focus on Technology, Risk & Controls, specifically for the Apps and Data.

That means you’ll be knee-deep in systems audits, helping shape our audit strategy while also rolling up your sleeves and getting audits delivered.

If you like the idea of shaping how a global bank manages risk in the face of evolving tech, regulation, and stakeholder pressure - read on.

The Gig:

• You’ll lead or be hands-on with tech and operational audits, from planning to fieldwork to writing reports that don’t sound like they were written by ChatGPT.
• You’ll know when to go it alone, and when to bring in or lead a team. Either way, you’re comfortable being the adult in the room.
• You’ll build strong relationships with stakeholders - everyone says that, but in your case, you’ll actually know how to talk to people outside of Audit.
• You’ll sniff out risk before it becomes someone else’s problem. And you’ll use tools (or help create them) that make the process less manual and more insightful.
• You'll coach junior team members without resorting to micromanaging or motivational quotes.

You:

• You’ve got a background in Internal Audit or Tech Risk in financial services - probably banking - and you’ve worked across a range of IT disciplines.
• You know your way around data management, analytics, ETL processes, and aren’t scared of acronyms like BCBS 239 or FFIEC 101.
• You’ve got some scars from speaking uncomfortable truths to senior stakeholders - and lived to tell the tale.
• You're familiar with tech frameworks and regulations (ISO, NIST, GDPR, DORA, etc.) and don’t glaze over when people start talking about disaster recovery or middleware.
• Ideally, you’ve got some professional letters after your name (CISA, CISSP, CIA) - but we care more about your brain than your badges.

The Deal:

• You’ll report to a Director who gets it.
• You’ll be in London, working in a hybrid model (no one’s chaining you to a desk five days a week).
• You’ll get the autonomy to do your best work, but enough structure to not feel like you’re freefalling.
• You’ll join a team that values results over politics.

Experience Required:

• AVP role, we're looking at 5-8 years ideally
• VP role, 10-12 will do nicely

Finances?

• Let's talk. We're in the 85k to 110k range, depending on role and experience.
• Plus a very healthy bonus and benefits structure.

Interested?

Don’t wait for a “perfect” CV. If you’re a seasoned audit pro who understands the intersection of tech, data, and risk - and you’re not allergic to change - hit apply.

If not? Share it with someone who is.