Senior Technology Auditor
Ford Motor Company
full-time
Posted on:
Location Type: Hybrid
Location: Dunton • United Kingdom
Visit company websiteExplore more
Job Level
Tech Stack
About the role
- Lead and execute assurance and advisory engagements allocated by the Internal Audit Manager.
- Liaise with and oversee the work of co-source audit partners.
- Regulatory Compliance: Evaluate IT systems against European financial regulations, specifically the Digital Operational Resilience Act (DORA), EBA Guidelines on outsourcing, FCA and PRA regulations and guidelines relating to Operational Resilience and Outsourcing and Third-Party Risk.
- Shared Services Oversight: Audit the Service Level Agreements (SLAs) and operational performance of IT services provided both to and by FCE.
- Cross-Border Data Governance: Assess controls surrounding the transfer and storage of financial and customer data across UK and EU jurisdictions, ensuring compliance with GDPR.
- Third-Party & Intra-group Risk: Perform audits on "Critical Third Parties" and intra-group service providers to ensure resilience and "Right to Audit" clauses are maintained.
- Perform detailed testing and analysis to evaluate the design and operating effectiveness of internal controls.
- Prepare and present reports to senior management.
- Follow-up on corrective actions taken by management related to audit findings.
Requirements
- Bachelor’s degree in computer science or related field.
- At least five years of IT audit experience, ideally within a regulated financial services environment.
- Experience of working on both technology and business-hybrid audits including cyber security, IT infrastructure and applications.
- Relevant technology and/or audit certification (CISA, CISSP, CISM or similar).
- Good knowledge of cyber security and IT infrastructure controls that include Identity and Access Management, Data Protection, Change Management, Incident Management, Business Continuity, Cyber Resilience/Response, Cloud Computing, Operating and Database Management Systems.
- Good understanding of industry security frameworks (e.g. NIST, ISO 27001, COBIT etc.).
- Familiarity with UK and European regulatory frameworks.
- Knowledge of intra-group outsourcing and shared service centre audit.
- Personable, enthusiastic, self-motivated with the ability to communicate clearly, concisely and candidly both verbally and in written form.
Benefits
- Global travel may be required.
- As part of our pre-employment checks process, successful candidates will be required to undergo a criminal record check.
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills & Tools
IT auditcyber securityIT infrastructureapplicationsIdentity and Access ManagementData ProtectionChange ManagementIncident ManagementBusiness ContinuityCloud Computing
Soft Skills
communicationpersonableenthusiasticself-motivatedclear communicationconcise communicationcandid communication
Certifications
CISACISSPCISM