Cybersecurity Governance Principle - Audit Manager

Entain
London
1 year ago
Applications closed

Related Jobs

View all jobs

Cybersecurity Specialist

Senior Cyber Security Governance Manager

Interim IT Security Governance Policy Writer

Cyber Security Architect

Network Product Owner

Security Architect

Job Description

As a Cybersecurity Governance Principle - Audit Manager, you will focus on supporting our team that manage our response to an ITGC audit and ensure delivery of a comprehensive and detailed response in a timely and accurate manner.  

Reporting to the Head of Cyber Security Governance you will be part of the Cybersecurity Governance team that offers internal and external services relating to Compliance, Standards, Regulations, and Information Security to ensure alignment of our Technology offering with the obligations that the organisation is exposed to.   

Are you looking for an opportunity to add true value to a team? 

What you will do -  

  • Come to terms with all relevant Cybersecurity methodology, terminology and Technology Governance processes. 

  • Act as the first point of contact for our ITGC audit company, translating their requirements for the internal teams and ensuring the delivery meets the audit expectations. 

  • Cross reference your knowledge of US SOX requirements to ensure alignment with audit deliverables. 

  • Establish relationships with internal business sponsors and key stake holders to ensure requests are processed with minimal business disruption. 

  • Understand complex IT requests and be able to translate them into simple but accurate requests. 

  • Identifying and implement improvements in control design to meet with audit requirements 

  • Comfortable with Identifying and escalating audit management issues to the relevant parties. 

  • Driving technical compliance checks and raising awareness of technical compliance requirements within the group 


Qualifications

  • Deep expertise in audit processes and objectives, with a proven ability to deliver compliant and effective solutions.
  • Strong knowledge of audit standards: US SOX, ISA 315, ITGC, SOC2, NIST, and ISO27001, with practical implementation experience.
  • Skilled at educating non-technical audiences, simplifying complex concepts for improved understanding and collaboration.
  • Process-driven and delivery-focused, ensuring timely, high-quality outcomes for all projects.
  • Quick to learn and adapt, with ongoing commitment to professional development and feedback-driven improvement.
  • Effective project management, successfully leading multi-stakeholder teams and ensuring on-time delivery.
  • Extensive IT audit experience, identifying and mitigating risks in systems and infrastructure.
  • Proficient in risk management, designing and implementing frameworks to improve risk visibility and mitigation.
  • Product security expertise, integrating robust protections into system design while maintaining user-centric solutions.
  • An understanding of the impending UK Corporate Governance Code , especially around the requirements of Section 4 - Audit, Risk and Internal Control



Additional Information

Depending on your role and location, you can expect to receive benefits like

  • Generous group bonus scheme
  •  A minimum salary of £70,000 (DOE)
  • Hybrid working – 2 days in the office 
  • Private medical insurance 
  • Pension scheme – matched to 6% 
  • Ability to buy and sell holiday 
  • Free subscription to wellbeing app Unmind 
  • Additional “It’s Your Game” day off to use at either Christmas or New Year 
  • Entain & Enhance days – 2 paid days off to focus on your professional or personal development 
  • Share save scheme 
  • Paid subscription to LinkedIn Learning 

And outside of this, you’ll have the chance to turn recognition from leaders and colleagues into amazing prizes, join a winning team of talented people and be a part of an inclusive and supporting community where everyone is celebrated for being themselves.

Should you need any adjustments or accommodations to the recruitment process, at either application or interview, please contact us.

At Entain, we do what's right. It's one of our core values and that's why we're taking the lead when it comes to creating a diverse, equitable and inclusive future - for our people, and the wider global sports betting and gaming sector. However you identify, our ambition is to ensure our people across the globe feel valued, respected and their individuality celebrated. 

At Entain, we do what's right. It's one of our core values and that's why we're taking the lead when it comes to creating a diverse, equitable and inclusive future - for our people, and the wider global sports betting and gaming sector. However you identify, our ambition is to ensure our people across the globe feel valued, respected and their individuality celebrated. 

Subscribe to Future Tech Insights for the latest jobs & insights, direct to your inbox.

By subscribing, you agree to our privacy policy and terms of service.

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

How Many Cyber Security Tools Do You Need to Know to Get a Cyber Security Job?

If you are trying to build or move forward in a cyber security career, it can feel like the list of tools you are expected to know never ends. One job advert asks for SIEM platforms, another mentions penetration testing tools, another lists cloud security, threat intelligence platforms, endpoint detection, scripting languages and compliance frameworks. Scroll LinkedIn and it gets worse. Everyone seems to “know” dozens of tools, certifications and platforms. Here is the reality most cyber security hiring managers agree on: they are not hiring you because you know every tool. They are hiring you because you understand risk, can think like an attacker and a defender, follow process, communicate clearly and make good decisions under pressure. Tools matter — but only when they support those outcomes. So how many cyber security tools do you actually need to know to get a job? For most job seekers, the answer is far fewer than you think. This article explains what employers really expect, which tools are essential, which are role-specific and how to focus your learning so you look credible, not overwhelmed.

What Hiring Managers Look for First in Cyber Security Job Applications (UK Guide)

If you want to stand out in the highly competitive world of cyber security job applications, you need to understand what hiring managers look for before they even finish reading a CV. Cyber security hiring managers scan applications quickly and with specific priorities in mind. They assess not just your technical ability, but your judgement, professionalism, clarity, risk awareness and evidence of impact. This guide explains what hiring managers look for first in cyber security applications across roles like Security Analyst, Security Engineer, Penetration Tester, Incident Responder, Security Architect, Governance Risk and Compliance specialists and Cloud Security positions. Use this as a practical, step-by-step checklist to sharpen your CV, LinkedIn profile, cover letter and portfolio before you apply on www.cybersecurityjobs.tech .

The Skills Gap in Cyber Security Jobs: What Universities Aren’t Teaching

Cyber security has become one of the most critical disciplines in the modern economy. From protecting financial systems and healthcare data to securing national infrastructure, cloud platforms and supply chains, cyber security professionals now sit at the frontline of digital trust. Demand for cyber security talent in the UK has surged. Job vacancies remain high, salaries continue to rise, and organisations across every sector report difficulty hiring skilled professionals. Yet despite this demand, many graduates struggle to break into cyber security roles and employers consistently report that candidates are not job-ready. The problem is not intelligence, ambition or academic effort. It is a persistent and widening skills gap between university education and real-world cyber security work. This article explores that gap in depth: what universities teach well, what they routinely miss, why the gap exists, what employers actually want, and how jobseekers can bridge the divide to build sustainable careers in cyber security.