It audit jobs in SunderlandCreate job alerts

Head of Information Security Governance, Risk and Compliance & Awareness Have you got the right qualifications and skills for this job Find out below, and hit apply to be considered. • Doxford, SR3 3XPArriva is a leading European passenger transport partner, operating in 11 countries across the UK and Europe. The company employs around 35,000 people, delivering more than 1.5 billion passenger journeys connecting people and communities safely, reliably and sustainably.We have strong roots dating back to 1938, an ambitious growth and sustainability agenda, and a continuously developing relationship with I Squared Capital – a global infrastructure investment fund manager • who acquired Arriva in 2024.We are looking for a Head of Information Security Governance, Risk, Compliance (GRC) & Awareness to join our Information Security Team on a full time, permanent basis, based from either our Doxford office, Sunderland or Lacon House, London.Reporting to the Group Chief Information Security Officer, the Head of InfoSec GRC & Awareness is responsible for leading the governance, risk, and compliance functions within the Information Security domain. This role ensures that the organisation maintains a robust security posture through the development and enforcement of policies, standards, and awareness initiatives. The role is pivotal in aligning security practices with business objectives and regulatory requirements.This position oversees the continuous improvement of security policies and standards, including technical standards, ensuring adherence across the enterprise. The role is accountable for measuring cyber maturity and driving compliance with internal and external requirements. It also includes oversight of the development and implementation of a comprehensive Operational Technology (OT) compliance framework, ensuring alignment with broader Arriva and industry recognised cyber security standards.The Head of InfoSec GRC & Awareness manages the enterprise-wide information security risk management process, including the maintenance of the InfoSec Risk Register, oversight of residual risk declarations, and escalation of serious risks in accordance with the Arriva Risk Management framework. The role also includes risk reporting and the execution of risk assessments across business units and third-party engagements. The role also supports internal and external audit activities and contributes to audit readiness and response efforts across IT functions.The role is responsible for leading assurance activities across key security domains such as HR security, physical security, system security, malware protection, network security, end-user device security, cloud security, and secure applications.The Head of InfoSec GRC & Awareness also owns the organisation’s security awareness programme, including designing and executing awareness campaigns, planning tailored training for high-risk users, and coordinating education roadshows.Direct responsibilities:Leads the improvement and enforcement of enterprise-wide Information Security Policies and Standards, including technical standards.Manages the UK Business Information Security Officer to support GRC and awareness activities across the UK businesses, as well as the governance of the wider European teams in the Netherlands and Mainland Europe business units.Maintains and develops Information Security Management System in line with ISO27001.Drives organisation-wide security governance and cyber maturity through standards compliance, assurance reviews, and gap analysis, be that Arriva policies and standards or industry recognised certifications such as ISO/IEC 27001, Cyber Essentials, NIS CAF, NIST CSF, CIS Controls.Oversees the development of a scalable Operational Technology (OT) Security Assurance Framework, including the management of day to day activities of the Operational Technology Compliance Manager.Develops and implements the enterprise Information Security Risk Methodology, including owning the Information Security, ensuring residual risk declarations are completed, prioritised, reviewed, and remediated with accountable stakeholders.Manages the third party due diligence process, including subject matter expertise in technical security requirements, supporting the on boarding of new suppliers, as well as the ongoing assessment of existing suppliers, including contract reviews with support from the data protection team.Leads key technical assurance activities such as the Arriva UK annual penetration test and red teaming exercises, working with Technology and Systems and the business, where appropriate, to ensure critical, high and medium risk findings are remediated.Provides IT audit support, including evidence coordination, control validation, and remediation planning.Leads assurance and compliance monitoring across information technology systems to include system security, malware Protection, network and endpoint security, cloud security and identity and access management activities.Improves and manages the Group-level Information Security Awareness Programme, including training strategy, annual compliance training content, communications plan, roadshows, and ongoing engagement.Knowledge, skills & experience:Practitioner qualifications e.g. CISSP certification, CESG Listed Advisor (CLAS), ISO27001 Lead Auditor, Certified Information Security Manager (CISM) Knowledge of all areas of Cyber SecurityEvidencable extensive experience in information security or IT governance roles, including proven experience working in large, federated, and complex enterprise environments.Experience developing and maintaining security policies, standards, and risk management frameworks, including experience in managing third-party risk.Track record of successful security awareness campaigns, measurable cultural change, and increased risk literacy across organisations.Familiarity with audit lifecycles, regulatory compliance, control assurance, and data protection including a deep understanding of security control frameworks (e.g., ISO/IEC 27001, Cyber Essentials, NIS CAF, NIST CSF, CIS Controls, PCI-DSS).Knowledge of all areas of IT Security, including cyber security for digital technologies, identity and access management, authentication and single sign-on, authorisation, logging and monitoring, audit, secure communications and cryptographic services, network and endpoint protection, hosting and cloud, vulnerability management, platform security, and systems development lifecycle.Provides clear vision and direction, inspiring and engaging individuals and the wider team to deliver excellence.Written and verbal communication and presentation skills. Influencing and negotiating skills.Possesses a proactive and solution-focused attitude, being capable of analysing business problems and delivering real solutions.Experience supporting IT audits and regulatory inspections.Success criteria & indicators:Delivery and enforcement of updated information security policies and standards across all business units, with measurable adherence tracked through assurance reviews and compliance audits.Maintenance of a comprehensive InfoSec Risk Register, with timely execution of risk assessments, accurate residual risk declarations, and escalation of high-impact risks in line with the Arriva Risk Management framework.Implementation of a scalable OT security assurance framework, with demonstrable alignment to industry standards and effective oversight of OT compliance activities.Successful coordination of internal and external audit activities, including evidence gathering, control validation, and remediation planning, with reduced audit findings and improved audit readiness scores.Execution of a Group-wide security awareness programme, including tailored training, annual campaigns, and engagement initiatives, with measurable improvements in user risk literacy and training completion rates.Stakeholder relationships:Group, divisional, and country business colleagues in ArrivaGroup, divisional, and country technology colleagues in ArrivaExternal industry and security expertsExternal consultants and suppliersData Protection Authorities (UK and Europe)Internal and external risk, compliance, and audit teamsThird party training providers and internal communications teamsThis job description sets out the main duties and responsibilities of the job-holder. It does not constitute an exhaustive or comprehensive description of duties and the job holder will be required to carry out any additional tasks as and when requested to do so by their manager. Responsibilities and duties may also change in light of future business needs and personal development.The closing date for applications is Tuesday 28th October 2025. Arriva Group reserves the right to close this vacancy early.

Reporting directly to the Head of IT Audit, this position will have full responsibility of the IT Audit plan and portfolio and will look at a wide range of areas in relation to technology. The preferred candidate for this position will be an experienced IT Auditor with a background of working within

Should you have any questions or wish to apply please do not hesitate to contact Clear IT Recruitment Limited. Personal values that align with our values; opportunity, fairness, transparency, personal responsibility, and teamwork. My client are a people-first Accountancy practice housing an audit te

In this position you will assist with the development of the IT strategy and enhance the IT audit methodology. Must be degree qualified with a professional accountancy, audit or relevant internal audit qualification, must also hold IT Audit qualifications (e. The Group Internal Audit team provides i

Audits: Facilitate, support and enabling IT audit and compliance reviews, ensuring responses are effectively documented and evidenced in a timely manner. Accountable for defining, implementing and governing the IT controls Framework to ensure that IT controls are effectively managed within IT. Align

Should you have any questions or wish to apply please do not hesitate to contact Clear IT Recruitment Limited. Assist with general administration and continuous improvement within the Audit & Assurance department. Complete sections of audit files or full files for subsidiaries in multi-entity group

We’re supporting the search for a Lead IT Auditor to join a high-performing Internal Audit function within a global financial services organisation. Work closely with senior leaders and peers across Internal Audit to ensure consistent audit standards and innovation. IT audit experience (internal a

Must be degree qualified with a professional accountancy, audit or relevant internal audit qualification, must also hold IT Audit qualifications (e. In this position you will assist with the development of the IT strategy and enhance the IT audit methodology. The Group Internal Audit team provides i

Pearse Professionals are partnering with a leading infrastructure organization seeking an interim Senior Audit Manager / IT Compliance Lead to drive group-wide audit, assurance and certification activity across international operations. Lead Auditor qualification with demonstrable experience managin

Joining a team of 10 in London, the hiring manager is looking to speak to applicants who have 1-5 years of IT Audit / IT Risk experience with strong technical knowledge across IT Infrastructure with any exposure to Cyber Security / Data Governance being beneficial. Bruin Financial have partnered wit

Should you have any questions or wish to apply please do not hesitate to contact Clear IT Recruitment Limited. This role offers the opportunity to manage a diverse client portfolio, lead audit assignments, and contribute to business development within a collaborative, high–performing environment.

Bruin Financial are currently working with a major banking group who are seeking a Senior IT Audit Manager to join their team in London. The successful incumbent will lead a portfolio covering audits across predominantly: Cyber Security & Applications. The IT Audit team of 10 work 3 days a week in t

Cayman has a vibrant expat community in the financial services sector with opportunities for networking and social activities. Conduct audits of IT systems, platforms, and technologies to assess effectiveness, security, and regulatory compliance, including SOC reporting and ISAE 3402/SSAE18 engageme

Recruiting Internal & IT Auditors within Insurance & Financial Services at Barclay Simpson. Lead and deliver end-to-end IT and data audits, supporting robust IT General Controls and the annual SOX process. Champion data analytics within the Internal Audit function to enhance assurance and insight.

Audit & Risk Recruitment are partnering with one of the UK's leading financial services organisations in their search for a Customer IT Assurance Manager! This is an excellent opportunity for an experienced IT Risk and assurance professional to lead a team play a key role in managing customer IT ass

Defining, implementing and governing the IT controls Framework to ensure that IT controls are effectively managed within IT. Strong ability to influence stakeholders and manage competing priorities with a hands-on, results-oriented approach. Facilitating and providing effective collaboration between

Familiarity with frameworks such as ITIL, ISO 27001, or COBIT is desirable. This is an excellent opportunity for an individual with strong analytical, technical, and communication skills who is passionate about ensuring systems and processes operate securely, efficiently, and in compliance with inte

Lutine Bell are excited to be working with a global financial services organization who are looking to appoint an IT Audit Manager to join their internal audit team in Yorkshire. Degree qualified with a professional accountancy, audit or relevant internal audit qualification, must also hold IT audit

This includes IT internal audit, IT risk management, independent programme assurance, clinical systems assurance, GRC tooling and Tech Transformation (AI, Strategy etc). Supporting the delivery of a portfolio of client-facing work within specialist areas – this includes producing high-quality outp

Support children and young people with daily living activities, including personal care, education, and recreational activities. A genuine passion for working with children and young people, with a commitment to providing the highest standard of care. Excellent communication skills and the ability t

Reporting to the Regional Security Manager - EMEA, you will collaborate with a multitude of internal stakeholders including leadership, to identify risks, develop and implement risk mitigating initiatives that positively impact and mature the overall physical security posture of the EMEA region, ens

Inspire, a part of the CareTech Family, is dedicated to providing exceptional residential care and support to children and young people aged 3-18 with diverse needs, including learning difficulties, complex health needs, physical disabilities, attachment disorders, and life-limiting conditions. Our

Proven experience in IT delivery or programme management, ideally in digital environments Strong technical understanding of IT systems, with confidence in discussing technical topics with 3rd-party vendors and internal teams Familiarity with software delivery lifecycles, agile practices, and working

Committed to the highest standards of care and governance, we provide innovative care pathways for people to live in community settings with learning disabilities, severe physical disabilities, autistic spectrum disorder, challenging behaviour, mental health, forensic needs and acquired brain injur

The organisation is a medium sized charity with a Board of Trustees, 24 staff and a strong ad hoc staff and volunteer base including many with direct experience of disability – all of whom are passionate about removing the barriers that disabled people face. The purpose of the job is to provide co

Committed to the highest standards of care and governance, we provide innovative care pathways for people to live in community settings with learning disabilities, severe physical disabilities, autistic spectrum disorder, challenging behaviour, mental health, forensic needs and acquired brain injur

The home has a warm and homely atmosphere from the minute you walk through the door and it has an enviable reputation within the local community for its high quality care. Blue Light Card offering a number of discounts across retail and hospitality . Whether you are an experienced care assista

Applicants must also provide reference information for all positions related to working with children and the vulnerable and details of employment going back to full time education. The young person attends education and enjoys many indoor and outdoor activities such as day trips, football, chess,

As a token of our gratitude for your loyalty, we'll treat you to an annual complimentary 2-night stay with dinner in a De Vere property of your choice, plus additional monetary rewards for reaching long service milestones. We value your hard work and recognise your achievements through our monthly c

The young person attends education and enjoys many indoor and outdoor activities such as day trips, football, chess, cinema, pool, table tennis which we have in the home, cooking and enjoys positive interaction and support. At Cambian Group, you’re not just working - you’re shaping futures, furt

This is a role with real influence! Required Knowledge & Experience - Strong background in Remediation & Regulatory Compliance within Financial Services Proven experience as a senior leader with the ability to influence at the highest levels, balancing strategic vision with operational delivery U

LA International is a HMG approved ICT Recruitment and Project Solutions Consultancy, operating globally from the largest single site in the UK as an IT Consultancy or as an Employment Business & Agency depending upon the precise nature of the work, for security cleared jobs or non-clearance vacanci

We are committed to diversity and inclusivity in our hiring practices. Proven multi-site management experience within elderly care or nursing homes. This is an exceptional opportunity for an experienced clinical leader who thrives on driving excellence in care, compliance, and operational performanc

Manage overall Tech services across the Distribution Centre * Managing overall change management, problem management and incident management * Communication with Senior stakeholders in business and technology teams * Working closely with Product and Engineering teams to ensure stability across th

No person is subjected to any less favourable treatment on any discriminatory grounds on the basis of age, disability, gender reassignment, marital or civil partner status, pregnancy and maternity, race, colour, nationality, ethnic or national origin, religion or belief, sex or sexual orientation. I

LA International is a HMG approved ICT Recruitment and Project Solutions Consultancy, operating globally from the largest single site in the UK as an IT Consultancy or as an Employment Business & Agency depending upon the precise nature of the work, for security cleared jobs or non-clearance vacanci

As a Disability Confident Employer, Airbus UK will offer an interview to any applicant that considers themselves to have a disability or long-term condition and meets the minimum criteria of the role (as set out in the job advert). Please let us know if you need us to make any adjustments for the se

LA International is a HMG approved ICT Recruitment and Project Solutions Consultancy, operating globally from the largest single site in the UK as an IT Consultancy or as an Employment Business & Agency depending upon the precise nature of the work, for security cleared jobs or non-clearance vacanci

With the significant growth in the business, you will be joining at an exciting time, where career advancement opportunities will be available for ambitious individuals who deliver results. Exciting Opportunity for an Operations Manager**. We have an excellent opportunity for an Operations Manager t

An understanding of cloud and DevOps with a can-do attitude that would allow us to grow this new area of business Key Skills & Experience: * Experience working as an Engagement Manager, managing platforms and/or integration projects * Proven leadership and motivational skills * Ability to build p

This role offers the opportunity to collaborate with graphic design, multimedia, instructional design, testing, and editorial teams, as well as external suppliers and subject matter experts, to deliver high-quality solutions for global clients. Exceptional written and verbal communication skills, wi

Collaborate with architects and developers to ensure technical feasibility, scalability, and integration of cloud-based and API-driven solutions. Salary – up to £60k with flexibility depending on experience. Lead end-to-end delivery of IT projects involving cloud infrastructure, APIs, and SaaS pl

Procurement people are currently working with a leading utilities business who are looking for an IT Procurement Manager. The role will support the end-to-end delivery of procurement activity across a range of goods and services specific to the IT Category. The role is hybrid, with 3 days a week on

You will work closely with business stakeholders, IT teams, and external consultants to ensure that the project is delivered on time, within budget, and with maximum business value. Engage stakeholders to gather requirements and align system capabilities with business needs. Coordinate cross-functio

Spectrum IT Recruitment (South) Limited is acting as an Employment Agency in relation to this vacancy. Chris Lynes at Spectrum IT Recruitment. Conduct market and competitive analysis to identify innovation and optimisation opportunities.

This role requires strong project management capabilities, deep NetSuite expertise, and the ability to work cross-functionally with technical and business stakeholders. The ideal candidate will ensure successful delivery on time, within scope, and aligned with business objectives. Proven experience

Monitor water quality and implement treatment solutions in line with UK regulations. Hybrid with travel to sites nationwide. Minimum 5 years’ operational experience in water utilities or the wider utilities sector.

Competitive salary, benefits, and long-term progression opportunities. Drive Lean and CI initiatives to reduce waste, improve efficiency, and boost site performance. Apply now with your CV or reach out to me on Lucy.