> Markdown version of [/jobs/ext/1641149-staff-it-and-security-auditor](https://www.wearedevelopers.com/jobs/ext/1641149-staff-it-and-security-auditor). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Staff IT and Security Auditor - **Company:** WorldPay - **Location:** Manchester, UK - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Amazon Web Services, Data Analysis, Software System Penetration Testing, Microsoft Azure, Unix, Control Objectives for Information and Related Technology (COBIT), Cyber Security, Oracle (Applications), PCI Data Security Standards, Systems Development Life Cycle, Cloud Services, Secure Coding, SQL Databases, Software Vulnerability Management, Software Security, Information Technology - **Published:** July 2, 2026 - **Apply:** https://uk.indeed.com/viewjob?jk=b2d3ec89c1508ea3 ## About the Role * Bachelor's degree in Auditing, Business Management or Information Technology. * Merchant Acquiring / Payment Processing, Card Issuance, and Private-label Consumer Solutions industry experience preferred. * Familiarity with internal control frameworks, including COBIT, FFIEC, PCI DSS, Sarbanes-Oxley, ISO27001, and ITIL. * Open to up to 10% travel requirement, including some potential international travel. * Merchant Acquiring / Payment Processing, Card Issuance, and Private-label Consumer Solutions industry experience preferred. * CIA, CISA, CISM, CISSP or other relevant certifications are preferred. * Big Four audit or risk advisory experience preferred. * Ability to work in a complex and evolving environment. * Ability to tailor project approaches based on areas of key risks, and critically evaluate audit procedures to maximize the value of each audit project. * Strong communication and presentation skills with an ability to tailor communications to different audiences. * Ability and willingness to continuously develop relevant skills and knowledge (company processes, industry standards and trends, audit best practices, etc.). * Pursue work with enthusiasm, energy, drive and team collaboration. * Establish and build effective relationships. * Collaborate with management and senior leadership to improve internal controls and processes. * Demonstrates ability to consider all team member's input prior to decision making. * Proactively communicate issues with colleagues and obtain agreement on audit findings and practical recommendations with control owners prior to presentation to management. It's a bonus if you have * A background in payments, fintech, or a client-facing commercial role. * Familiarity with the payment processing industry and common technology control frameworks, including COBIT, NIST Cybersecurity, ISO 27000 series, PCI-DSS, and FFIEC IT Handbook. ## Description Make your mark at one of the biggest names in payments. We're looking for Staff IT & Security Auditor to join our ever evolving Internal Audit team and help shape the future of global commerce. What you'll own * You'll support the execution of risk-based IT, cybersecurity, operational, and integrated audits across global business and technology functions. * You'll assist with all phases of the audit lifecycle, including: risk assessment, planning, client coordination, fieldwork, data analysis, workpaper documentation, reporting and remediation validation. * You'll evaluate the design and operating effectiveness of technology and security controls. * You'll ensure audit testing work papers are documented in a consistent and high quality manner while executing project tasks in adherence to established timelines. * You'll identify control weaknesses, root causes, and practical recommendations to improve risk management and operational effectiveness. * You'll perform assigned audit testing and remediation validation in accordance with Internal Audit methodologies and professional standards. * You'll build and develop Internal Audit's brand within the company through meaningful relationship building. * You'll enable continuous improvement of the Internal Audit department by identifying and communicating enhancement opportunities to department leadership. * You'll work with colleagues located both locally and in various offices around the world. * You'll ensure adherence to all applicable department and company policies, and professional standards. What you'll bring * At least one year of relevant audit and / or consulting experience in one or more of the following areas: * Technical and security control deployment within cloud service provider environments (i.e., Amazon AWS, Google GCP, and Microsoft Azure). * Information and data protection for sensitive company data * Information security operations, including vulnerability management, penetration testing, centralized log management, customized security monitoring/alerting, threat intelligence practices and security incident response * Application security, including secure coding practices, segregation of duties and least privileged access concepts * System development, project management and change management * Technology infrastructure design, management and operations across various technology platforms (i.e., mainframe, Windows, UNIX/Linux, SQL, Oracle, etc.) * Business continuity and technology resiliency * System implementations * Integration of business process controls with supporting technologies. Business process workflow documentation, including identification of key risks and the corresponding business and technology controls * Knowledge of auditing core concepts (risk, control), principles and practices. ## Related Videos - [WeAreDevelopers LIVE - Node and Package Security](https://www.wearedevelopers.com/videos/2138-wearedevelopers-live-node-and-package-security) - [Data Science in Retail](https://www.wearedevelopers.com/videos/586-data-science-in-retail) - [Fault Tolerance and Consistency at Scale: Harnessing the Power of Distributed SQL Databases](https://www.wearedevelopers.com/videos/1146-fault-tolerance-and-consistency-at-scale-harnessing-the-power-of-distributed-sql-databases) - [Migrating half a million users to a new payment service provider](https://www.wearedevelopers.com/videos/730-migrating-half-a-million-users-to-a-new-payment-service-provider) - [The Time Paradox: Building Timezone-Safe Python/Django Applications](https://www.wearedevelopers.com/videos/1915-the-time-paradox-building-timezone-safe-python-django-applications) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) ## Related Articles - [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk) - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries) - [UK Business Culture and Etiquette](https://www.wearedevelopers.com/magazine/326-uk-business-culture-and-etiquette)