Audit Manager

London
11 months ago
Applications closed

Related Jobs

View all jobs

IT Audit Manager

Regional Network Performance Analyst

Head of Oracle Cloud Applications - Fusion

Cyber Assurance Manager

Technology Governance Manager

Back Office Service Manager

EJ813: Audit Manager
Location: Central London
Salary: £50,000 - £70,000 + 15% bonus

Overview:

First Military Recruitment, on behalf of their client are looking for a proactive individual with audit experience, who will be responsible for running our client’s GRC strategy. This role is ideal for somebody with experience in cyber/information security internal auditing and who has a keen interest in GRC.  

The ideal candidate might have pre-existing experience of running ISO audit programs or be at the point in their career where they are ready to take on this responsibility.  They will also consider candidates with experience of running compliance systems including risks management frameworks, business continuity and cyber security.

Key Responsibilities:

Develop and maintain an ISO compliance program in accordance with relevant ISO frameworks (e.g., ISO 9001, ISO 22301, ISO 27001).
Plan, manage and conduct the internal audits program
Document audit findings, observations, and recommendations clearly and concisely
Involvement in Vendor risk management
Collaborate with internal senior stakeholders to build compliance objectives to support the businesses corporate objectives
Manage specific compliance focused projects as directed by the Head of Security and Compliance
Interpret and apply compliance frameworks and guidelines and map them to our current practices.
Promote a culture of continuous improvement within the organisation.
Identify opportunities to enhance audit processes and methodologies.
Qualifications & Experience:

Minimum of 3 years of experience in a GRC related field.
Collaborative and solution orientated: Good at building working relationships with senior stakeholders and teams within the business
Proven experience in managing ISO compliance programs and audits
Detail-oriented with a high level of accuracy and effective communication and interpersonal skills.
IT literacy extending to basic data management and ideally use of GRC systems
Proactive and self-motivated: Comfortable with working with ambiguity and adaptable in a fast-paced environment
Professional certifications such as ISO Lead Auditor preferred but not necessary

Subscribe to Future Tech Insights for the latest jobs & insights, direct to your inbox.

By subscribing, you agree to our privacy policy and terms of service.

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

Penetration Tester Jobs in the UK: What Employers Actually Want in 2026

The demand for skilled professionals in cyber security has never been higher, and penetration testers sit at the very heart of this rapidly evolving industry. As organisations across the UK continue to digitise their operations, protect sensitive data, and defend against increasingly sophisticated threats, the need for ethical hackers has grown dramatically. If you are considering a career in this field—or looking to advance within it—it is essential to understand what employers are really looking for in 2026. This guide breaks down the current expectations, required skills, certifications, and practical experience that can help you stand out in a competitive job market.

SOC Analyst Jobs UK 2026: Salaries, Skills & How to Get Hired

Cyber security is one of the UK's fastest-growing career paths — and SOC analyst is where most people begin. It's in high demand, genuinely accessible, and you don't need a degree or years of experience to get started. But knowing what UK employers actually want in 2026 — what they pay, which certs matter, and how to stand out — is a different matter. This guide covers all of it.

How Many Cyber Security Tools Do You Need to Know to Get a Cyber Security Job?

If you are trying to build or move forward in a cyber security career, it can feel like the list of tools you are expected to know never ends. One job advert asks for SIEM platforms, another mentions penetration testing tools, another lists cloud security, threat intelligence platforms, endpoint detection, scripting languages and compliance frameworks. Scroll LinkedIn and it gets worse. Everyone seems to “know” dozens of tools, certifications and platforms. Here is the reality most cyber security hiring managers agree on: they are not hiring you because you know every tool. They are hiring you because you understand risk, can think like an attacker and a defender, follow process, communicate clearly and make good decisions under pressure. Tools matter — but only when they support those outcomes. So how many cyber security tools do you actually need to know to get a job? For most job seekers, the answer is far fewer than you think. This article explains what employers really expect, which tools are essential, which are role-specific and how to focus your learning so you look credible, not overwhelmed.