Internal Audit Manager – Cyber & IT Controls

About the role

We are seeking experienced Internal Audit Managers to lead audit engagements in two specialisations – Cyber & IT Controls and Corporate & Investment. The role sits within the Internal Audit Strategic Business Unit, providing independent assurance on governance, risk and control processes while partnering with business units to protect value and enhance resilience.

Key responsibilities

• Plan and execute IT and cyber audits in line with the annual audit plan, covering IT General Controls, cybersecurity posture, access management, third‑party risk, disaster recovery and cloud environments.
• Lead operational audits of core and support functions, assessing process efficiency and control effectiveness.
• Oversee audit teams, review deliverables for technical accuracy, and ensure high‑quality reporting.
• Coach and develop senior auditors and junior staff, supporting certification goals such as CISA or CISM.
• Collaborate with internal audit leadership, risk, COO and digital transformation teams on cross‑cutting risks like cyber‑fraud and automated controls.

Required profile

• Bachelor’s or Master’s degree in IT, Cybersecurity, Information Systems or a related field.
• 6‑8 years of audit experience in IT or cybersecurity, with at least 2 years in a supervisory role.
• Professional certification such as CISA, CISM or CRISC.
• Strong ethical foundation, confidentiality and resilience.

Required skills

• IT General Controls (ITGC)
• Cybersecurity frameworks – NIST, ISO 27001, COBIT
• IT infrastructure, networks and application security
• Access management and cloud security
• Data governance, third‑party risk assessment and disaster recovery

What we offer

• Opportunity to influence risk strategy across a large organization.
• Professional development and support for certifications.
• Collaborative environment with senior leadership.