Senior Internal Auditor (Technology)

MI5
Failsworth, UK
12 days ago
Apply on www.collegerecruiter.com
Prepare application

Role details

Contract type
Permanent contract
Employment type
Part-time / full-time
Experience level
Expert
Compensation
£59,200.0 - £61,031.0
Working hours
Shift work

Tech stack

Artificial Intelligence Cloud Computing Cyber Security Information Systems Data Governance Data Security IT General Controls (ITGC)

Job description

As Senior Internal Auditor (Technology), you’ll join a skilled team and provide clear, honest insights to help make sure vital systems and services across the UK intelligence community are working as they should. You’ll work across MI5, MI6 and GCHQ providing assurance and advice on the compliance, resilience, and efficiency of operational and mission-critical technology. These systems are cutting-edge - often designed to stay ahead of evolving threats - so you’ll grow your expertise in areas such as AI, cloud infrastructure, cybersecurity, and specialist operational platforms. Day to day, you’ll work on a variety of projects, either as part of a small team or independently. Together, you’ll provide customers with high-quality assurance, advisory, and investigatory services, along with strengthening and enhancing our internal risk management and governance. This role can be based in London, Cheltenham or Manchester, and you may also be requested to travel within the UK and overseas.

Requirements

You have a passion for technology and its potential, enjoy learning and keeping up with emerging trends, and are excited by working with systems you won’t find elsewhere. You hold a Certified Information Systems Auditor (CISA) qualification or equivalent and have a solid background in internal audit and risk management across the public and/or private sector. You have delivered complex, medium and high-risk technology audits and have comprehensive knowledge of technology risks and controls, particularly in cyber security, operational resilience, cloud, and AI technologies. Your varied background may also include expertise in IT General Controls (ITGC), change management, technology infrastructure, cloud computing, service management, and AI. You may have audit experience in data governance, data privacy and data security. You’re skilled in audit testing methodologies, report writing, data and root-cause analysis, and confident reviewing and improving control processes. With experience leading small teams, managing competing priorities, and delivering high-quality audit work, you thrive in fast-paced, evolving environments. You possess sound judgment, the ability to work with limited structure, and the capacity to make informed decisions amidst ambiguity. You bring a proactive mindset, strong analytical abilities, and excellent communication skills, engaging confidently with stakeholders at all levels and influencing change where needed.

Benefits & conditions

Flexible Working: Full-time or part-time positions are available, with flexible working options. Working from home is available up to one day per week - this will depend on work requirements, as your access to mission-sensitive systems will be restricted to the office. Compressed hours are also an option, providing flexibility to help maintain a healthy work-life balance.

About the company

MI5, MI6 and GCHQ are the UK’s Intelligence Services. We work together to safeguard Britain’s people, interests, and businesses from various threats at home, overseas and online, including cyber-attacks, espionage, terrorism, and organised crime. Working across our vital missions, you’ll deliver impact at the heart of national security, all within a supportive and inclusive environment that allows everyone to thrive.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.collegerecruiter.com
Prepare application

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

4:04 min

Embedding data security and applied ethics into developer education

Daniel Tao +3 · World Congress 2024

4:11 min

Introduction to cloud-native application developer security

Micah Silverman · World Congress 2022

2:27 min

Introduction to WebAssembly in a cloud computing context

Edo Edo · World Congress 2024

5:13 min

Audience Q&A on maturity assessments and external consultants

Mathias Tausig · LIVE

41 sec

Massive client data loss and bio-digital storage

Chris Heilmann +1 · LIVE

59 sec

Proving regulatory compliance to auditors and chief officers

Mike Bursell Mike Bursell · World Congress 2026 Europe

Videos

See all

Related articles

See all