It auditor jobs in United Kingdom

At BNY, our culture allows us to run our company better and enables employees’ growth and success. As a leading global financial services company at the heart of the global financial system, we influence nearly 20% of the world’s investible assets. Every day, our teams harness cutting-edge AI and breakthrough technologies to collaborate with clients, driving transformative solutions that redefine industries and uplift communities worldwide. Recognized as a top destination for innovators, BNY is where bold ideas meet advanced technology and exceptional talent. Together, we power the future of finance – and this is what #LifeAtBNY is all about. Join us and be part of something extraordinary. We’re seeking a future team member for the role of Vice President (VP) Internal Auditor to join our Compliance and Financial Crimes team in Internal Audit. This role is located in Manchester – (4 days in office). In this role, you’ll make an impact in the following ways: • Participate in delivering audit, risk, and control assessments covering the bank’s full scope of regulatory compliance and anti-financial crime control frameworks, • Participate in all stages of the Internal Audit cycle including planning, fieldwork, and reporting, and validating the actions our businesses take to address risk and control issues, • Identify meaningful issues that impact the businesses and activities we review. And you’ll be collaborating with Internal Audit and Business management to develop appropriate remedial action to address the issues identified, • Take the lead for planning and delivering audit work, participating in change projects, and joining meetings with stakeholders to understand what’s new or changing in their businesses, • Prepare documented issues, make smart recommendations to address gaps, and draft audit reports, • Follow up audit actions and where necessary test and validate that the actions meet our standards and address our concerns, • Build on the strong relationships we have with our key stakeholders in the business and with our colleagues throughout the global Internal Audit team, • Contribute to Internal Audit’s ‘Continuous Monitoring’ work – where we stay close to new and changing risk conditions throughout the businesses we cover To be successful in this role, we’re seeking the following: • Experience working in a Financial Services Internal Audit team and a proven ability to understand, assess, and describe risks and controls relevant to regulatory compliance and financial crime prevention., • We seek a solid grasp of the key activities and methods used by an Internal Audit team, including identifying, assessing, and documenting risks and controls; designing and executing audit tests to evaluate the design and operational effectiveness of controls; and compiling findings to enable the business to implement appropriate corrective measures., • Our team evaluates a wide spectrum of risk and control areas encompassing the entire regulatory conduct (non-financial compliance) and financial crime compliance framework. You should demonstrate familiarity with key concepts such as market, customer, and employee conduct, anti-money laundering controls, and economic sanctions. Ideally, you will have relevant experience or qualifications in these fields; however, it is essential that you show a strong awareness of current compliance and financial crime control issues and a keen interest in expanding your expertise in these areas., • Excellent written and verbal communication. We work with business stakeholders at all levels of the organization so the ability to demonstrate a degree of gravitas and technical credibility, particularly when discussing complex topics, is essential., • You will be educated to degree level or an equivalent professional qualification. Ideally, you will have completed a recognized relevant post-graduate qualification (e.g. CIA, CMIIA, ACA, ACCA, CAMS), but this is not essential and we’ll be keen to consider candidates that can demonstrate their professional experience working in a financial services internal audit function, and possibly with direct experience of auditing compliance and financial crime controls. At BNY, our culture speaks for itself, check out the latest BNY news at: Here’s a few of our recent awards: • America’s Most Innovative Companies, Fortune, 2025, • World’s Most Admired Companies, Fortune 2025, • “Most Just Companies”, Just Capital and CNBC, 2025 Our Benefits and Rewards: BNY offers highly competitive compensation, benefits, and wellbeing programs rooted in a strong culture of excellence and our pay-for-performance philosophy. We provide access to flexible global resources and tools for your life’s journey. Focus on your health, foster your personal resilience, and reach your financial goals as a valued member of our team, along with generous paid leaves, including paid volunteer time, that can support you and your family through moments that matter. BNY is an Equal Employment Opportunity/Affirmative Action Employer - Underrepresented racial and ethnic groups/Females/Individuals with Disabilities/Protected Veterans.

About the Role ControlCase is seeking a Senior IT Security Assessor to join our growing global team. In this fully remote UK-based role, you will conduct IT security audits and assessments for clients across the United Kingdom and the European region, ensuring compliance with PCI DSS, ISO 27001/2, GDPR, NIS2, DORA, and other relevant frameworks. This position offers the opportunity to become a PCI QSA (training and certification sponsored by ControlCase) while working in an international, collaborative, and growth-focused environment. Responsibilities • Lead client audits and compliance assessments across multiple frameworks., • Review and analyze systems, applications, databases, and network devices., • Assess cloud environments including AWS, Azure, and GCP., • Define audit scope, identify risks, and recommend improvements., • Provide compliance consulting to help clients meet regulatory requirements., • Produce final audit and compliance reports., • Collaborate with internal QA, project managers, and delivery teams., • Maintain professional certifications and stay current with industry standards. Qualifications and Skills • 4–5 years of IT security auditing or consulting experience., • Bachelor’s degree in information security or related field., • Deep knowledge of IT security controls, access management, logging, vulnerability assessment, and secure system configuration., • Experience with PCI DSS, ISO 27001/2, GDPR, NIS2, DORA, or similar compliance frameworks., • Strong understanding of cloud environments and network architectures., • Excellent English communication skills; fluency in German strongly preferred., • At least one certification from each of the following groups preferred: • Group 1: CISA, ISO 27001 Lead Auditor, • Group 2: CISSP, ISO 27001 Lead Implementer, CISM

Are you looking to leverage your skills in Cyber Security within finance domain, and bring your advisory expertise on CyberArk Endpoint Privilege Manager? We have an exciting opportunity for you – Privileged Access Management & Endpoint Privilege Management SME! Careers at TCS: It means more TCS is a purpose-led transformation company, built on belief. We do not just help businesses to transform through technology. We support them in making a meaningful difference to the people and communities they serve - our clients include some of the biggest brands in the UK and worldwide. For you, it means more to make an impact that matters, through challenging projects which demand ambitious innovation and thought leadership. • Make an impact working for a global consultancy company., • Be the driving force behind the growth and success in our Cyber Security Program., • Build strong relationships with a diverse range of stakeholders. The Role As a PAM EPM SME, you will be responsible for governing and advice on technical direction for CyberArk and access management endpoint privilege management for an investment bank. Key responsibilities: • Govern and advise on technical direction for Authentication, CyberArk and Access Management, especially through technical workshops and 1:1 coaching sessions., • Daily management and maintenance of the Authentication, CyberArk and Access Management platform, ensuring service availability; health and performance monitoring, and alerting and the maintenance of operational and technical documentation., • Proactively initiate investigations for improvements for standard operating processes and procedures., • Utilising the current owned or licensed tools available to evidence and escalate issues to the management team., • Extensive Hands-on experience in CyberArk Endpoint Privilege Manager. Your Profile Essential skills/knowledge/experience: • Extensive work experience in PAM solutions with strong focus on CyberArk EPM., • Knowledge of Microsoft Active Directory (e.g., Certificate Services or Federated Services)., • Experience with Entra ID including management via Powershell modules and Graph API or Conditional Access Policies., • Skilled in DNS configuration and advanced troubleshooting., • Knowledge of Quest Change Auditor and Quest Forest Recovery Manager., • Hands-on experience with Azure AD Connect Connectors, sync rules and metaverse queries., • Experience with SSO implementation via SAML and OAUTH., • Knowledgeable of PowerShell Automation and centralised management and script creation., • Sound understanding of Multi-Factor Authentication configuration via MS Authenticator. Desirable skills/knowledge/experience: • Previous experience with CyberArk Privileged Access Management., • Experience with CyberArk Endpoint Privilege Manager., • Knowledge of cloud security best practices and compliance standards., • Experience with agile development methodologies. Rewards & Benefits TCS is consistently voted a Top Employer in the UK and globally. Our competitive salary packages feature pension, health care, life assurance, laptop, phone, access to extensive training resources and discounts within the larger Tata network. Diversity, Inclusion and Wellbeing Tata Consultancy Services UK&I is committed to meeting the accessibility needs of all individuals in accordance with the UK Equality Act 2010 and the UK Human Rights Act 1998. We believe in building and sustaining a culture of equity and belonging where everyone can thrive. Our diversity and inclusion motto is ‘Inclusion without Exception’. Our continued commitment to Culture and Diversity is reflected across our workforce implemented through equitable workplace policies and processes. You’ll find a welcoming culture and many internal volunteering and social networks to join (these are optional). Our diversity, inclusion and social activities include 12 employee networks such as gender diversity, LGBTQIA+ & Allies, mental health, disability & neurodiversity inclusion and many more, as well as health & wellness initiatives and sports events and we sponsor the London Marathon. We welcome and embrace diversity in race, nationality, ethnicity, disability, neurodiversity, gender identity, age, physical ability, gender reassignment, sexual orientation. We are a disability inclusive employer and encourage disabled people to apply for this role. If you are an applicant who needs any adjustments to the application process or interview, please contact us at with the subject line: “Adjustment Request” or call TCS London Office 02031552100 to request an adjustment. We welcome requests prior to you completing the application and at any stage of the recruitment process. Next Steps Due to a high volume of applications, we will be unable to contact each applicant individually on the status of their application. If you have not received a direct response within 30 days, then it should be deemed unsuccessful on this occasion. Application Process 1. Online application > 2. Technical assessment > 3. Technical discussion > 4. Managerial discussion > 5. HR discussion. (Tech graduate role – typically), 2. Online application > 2. Technical discussion > 3. Managerial discussion > 4. HR discussion (EP role – usually) Join us and do more of what matters. Apply online now.

Senior Cybersecurity GRC Consultant (Relocate to Tax Free Abu Dhabi) Abu Dhabi, United Arab Emirates | Full-time | Relocation Opportunity Salary: Tax-free 45,000 AED per month (up to €125,000 p/a) About the Company Our client is a rapidly growing IT consultancy partnering with leading organisations across the Middle East. They deliver end-to-end digital, data, and cybersecurity transformation programs, helping enterprises modernise securely in cloud and hybrid environments. The Role We’re seeking a Senior Cybersecurity GRC Consultant to join the team onsite in Abu Dhabi. This is a strategic, hands-on role where you’ll help shape and maintain robust cybersecurity and compliance frameworks across complex enterprise environments. If you enjoy simplifying regulatory challenges, designing pragmatic governance models, and influencing security strategy at scale this could be your next move. Key Responsibilities • Translate international standards (NIST CSF, ISO 27001, GDPR, SOC 2, PCI DSS, CSA CCM) into actionable policies and controls., • Design and implement unified compliance frameworks across cloud, hybrid, and enterprise systems., • Lead internal and external audits, certification readiness, and regulatory assurance activities., • Conduct risk assessments, control testing, and third-party assurance programs., • Stay ahead of evolving regulations, standards, and automation opportunities., • Prepare and deliver executive-level compliance reports and dashboards., • Mentor junior consultants and collaborate closely with cross-functional teams. What We’re Looking For • 6–8+ years’ experience in cybersecurity governance, risk, and compliance., • Strong background in GDPR and data protection frameworks (European experience preferred)., • Hands-on experience with major cloud environments (AWS, Azure, or GCP)., • Strong knowledge of compliance automation tools (ServiceNow GRC, OneTrust, Archer, or similar)., • Excellent communication and stakeholder management skills, including C-level engagement. Preferred Certifications CISM, CISA, CRISC, CISSP, ISO 27001 Lead Implementer/Auditor, CCSK, AWS Security Specialty, GDPR Practitioner. If you’re a cybersecurity professional passionate about compliance and looking to take on a new challenge, Apply Now!

A leading global consultancy, is is offering the opportunity for a Salesforce Administrator/Architect to support a Fortune 100 technology company. This pivotal role will focus on ensuring that Salesforce implementations adhere to stringent regulatory and compliance frameworks, overseeing internal controls, and managing audit activities across multiple business units. As the Salesforce Compliance Auditor, you will play a key part in aligning complex system configurations with compliance requirements, liaising with both internal stakeholders and external auditors (including Ernst & Young) to maintain transparency and operational integrity. Key Responsibilities: • Design, implement, and continuously enhance internal control structures within Salesforce environments., • Oversee and conduct internal compliance assessments to ensure systems meet established governance and control standards., • Act as the primary liaison with external audit partners, managing requests and ensuring all audit deliverables are met., • Lead the SOC 1 audit review process, identifying potential control gaps and mitigating risk exposures., • Produce comprehensive audit documentation, including evidence gathering and validation of compliance controls., • Present audit findings and recommendations clearly to senior stakeholders and leadership teams., • Translate technical Salesforce configurations into documentation suitable for compliance and audit purposes., • Partner with the Internal Controls and Risk teams to review and refine control documentation., • Monitor Salesforce system changes on a regular cadence (monthly/quarterly) to ensure continued compliance with internal and external standards., • Stay ahead of emerging regulatory developments and industry best practices impacting Salesforce governance. Requirements: • Experience in Salesforce architecture, administration, or system governance., • Proven experience developing and managing internal control frameworks and compliance processes., • Solid understanding of SOX compliance, risk controls, and audit testing procedures., • Hands-on experience working with external auditors, ideally within Ernst & Young’s methodology or equivalent., • Strong ability to produce accurate, detailed audit documentation and compliance reports., • Excellent analytical and problem-solving skills, with meticulous attention to detail., • Confident communicator with the ability to convey technical insights to non-technical audiences., • Demonstrated experience collaborating with cross-functional teams in global or enterprise environments. Preferred Qualifications: • Salesforce Certified Administrator or equivalent certification., • Background in IT audit, compliance, or risk management., • Experience managing SOX controls within SaaS ecosystems., • Awareness of data privacy and protection regulations impacting CRM systems (e.g., GDPR)., • Previous collaboration with Big Four accounting firms., • Working knowledge of GRC platforms or compliance management tools. This is a 6-month FTC with salary ranging from £50-110k for the right candidate. The role also requires immediate availability to start. Please apply for instant consideration.

Entity: Finance Job Family Group: Finance Group Job Description: Head of Control, Customers and Products (C&P) and Other Businesses and Corporate (OB&C) At bp our goal for C&P is to deliver the future of mobility, energy and services for our customers by innovating with new business models and service platforms. It aims to be customer-centric, agile and responsive to changing customer needs and dynamic markets. OB&C comprises technology, bp ventures, our corporate activities & functions (eg Treasury) plus any residual costs of the Gulf of America oil spill. This role spans our C&P segment ~90% of time and OB&C ~10% of time. This job description will therefore start with a focus on the C&P elements. 'Customers' houses our mobility and ‎convenience, lubricants, aviation, marketing and our next-generation businesses, making it a highly integrated and ‎interconnected organisation. 'Products' reports the results of our refining business together with the asset-backed and speculative trading results from our refined products and trading businesses based in Asia Pacific, Europe and the United States. This exciting role collaborates with the VPs of Finance and Senior Finance Control Managers in each of our C&P businesses. You will oversee delivery of all Accounting, Reporting and Control (ARC) activities; ensuring policy compliance, supporting M&A activity, monthly close and group quarter-end reporting requirements all whilst maintaining a robust and effective control environment. Particularly at quarter end, there is opportunity for great exposure; engaging at SVP and EVP level as you review all control-related matters and working closely with colleagues in FP&A and Investor Relations to develop the external messaging of our results. Through delivery of high-quality financial reporting and control activities, as well as engaging broadly across bp’s C&P businesses at a senior level; you will enable the Financial Planning & Analysis (FP&A) agenda. What you will do… • Together with the business VPs Finance, responsible for the ARC environment for the global C&P businesses., • Support a diverse global team of Senior Finance Control managers and their teams - discussing pertinent control and key accounting issues and helping them to partner with the business to deliver our strategy., • Lead the root cause analysis on control gaps, including identification of themes/trends, and preparing related Audit Committee papers, as required and subsequently establish the tiering of control gaps in conjunction with the VP Control and Assurance (C&A)., • Approve judgement conclusions or raise to Group Controller and/or Technical Accounting based on authority limits., • Engage with the VPs Finance to ensure business risks e.g. commercial, fraud, cyber are understood., • Lead quarter-end discussion on control-related items with the SVP Finance C&P and EVP C&P. Attend SVP Finance C&P Leadership team meetings on a quarterly basis and address ARC-related issues as requested., • Support group-led ICFR projects requiring business input., • Key collaborator with our Group Auditor, Deloitte for C&P, ensuring that audit queries are resolved in a timely way, whilst managing an effective and efficient relationship., • Partner with Internal Audit ensuring the focus of the audit programme is on key finance risks and that there is successful management and remediation of findings, with none overdue., • Key relationship with the Head of Business Performance C&P within our FBT FP&A organisation and partner with our FBT Accounting and Control colleagues to ensure end-to-end process optimisation and effectiveness., • Report into the ARC Leadership team and actively work on shaping the ARC/Central FP&A sub-entity, including development of future talent and ensuring that appropriately skilled resource is deployed to the businesses. For OB&C, you will undertake similar responsibilities to those listed above but in support of the VP Finance OB&C and function EVPs. You will play a key role in the quarterly due diligence process and deliver oversight and advice relating to Delegation of Authority (EVP and SVP level), SOx scoping, monitoring financial policy compliance and supporting the implementation of global projects. What you will bring... • A Bachelor's degree (or equivalent) is required - preferably in Finance, Business, or Accounting, • Strong leadership and people management skills, with consistent track record to create a vision for a virtual team and improve overall capability., • Strong impact, interpersonal, networking and communication skills, with the ability to make a significant contribution to the business management team while offering sound independent advice on Finance matters, • A self-starter attitude, taking opportunity to network and participate in projects outside of the immediate team, • Strong influencing ability, with capability to build consensus and engagement at all levels and across organisational boundaries., • Significant business finance experience (+15 years), • Ability to interpret complex business situations, understand accounting and process implications, and to communicate solutions effectively., • Good command of written and spoken English, • Strong analytical and problem-solving skills, • Ability to lead change and prioritise workload in a fast-paced environment, • Technical accounting exposure, business acumen and an understanding of business drivers, with related business experiences is desirable., • Experience of having worked in a C&P business or retail, asset-based business, manufacturing, or logistics would be beneficial., • A relevant post-graduate qualification is desirable. Why Join our team? At bp, we provide an excellent working environment and employee benefits such as an open and inclusive culture, a great work-life balance, tremendous learning and development opportunities to craft your career path, life and health insurance, medical care package and many others. We support our people to learn and grow in a diverse and exciting environment. We believe that our team is strengthened by diversity. We are committed to crafting an inclusive environment in which everyone is respected and treated fairly. There are many aspects of our employees’ lives that are significant, so we offer benefits to enable your work to fit with your life. We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, colour, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. Apply now! Travel Requirement Up to 10% travel should be expected with this role Relocation Assistance: This role is not eligible for relocation Remote Type: This position is a hybrid of office/remote working Skills: Accounting policy, Accounting Processes and Financial Systems, Analytical Thinking, Business Acumen, Business process control, Business process improvement, Collaboration, Commercial Acumen, Communication, Decision Making, Influencing, Internal control and compliance, Managing change, Problem Solving, Risk Management, Stakeholder Management Legal Disclaimer: We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, socioeconomic status, neurodiversity/neurocognitive functioning, veteran status or disability status. Individuals with an accessibility need may request an adjustment/accommodation related to bp’s recruiting process (e.g., accessing the job application, completing required assessments, participating in telephone screenings or interviews, etc.). If you would like to request an adjustment/accommodation related to the recruitment process, please ___. If you are selected for a position and depending upon your role, your employment may be contingent upon adherence to local policy. This may include pre-placement drug screening, medical review of physical fitness for the role, and background checks.

About CFGI: Corporate Finance Group, Inc. (“CFGI”) was founded in 2000 by former Big 4 professionals. CFGI is an established industry leader with the resources to successfully navigate today’s complex accounting, reporting, compliance and tax landscape. An assemblage of top-flight professionals with in-depth public accounting expertise, CFGI can fulfill a variety of client needs without the restrictions of auditor independence. With a foundation of knowledge amassed while serving a variety of industries, CFGI is able to guide companies through a wide range of routine and complex business scenarios. The resulting partnership is an innovative resource with the power to address our clients’ most crucial accounting, finance and operational challenges. We provide our clients with a unique combination of integrity, flexibility, creative solutions, and deep tax technical expertise. Many of our clients are global, market leading, publicly held companies, while others are privately held, early stage, or venture-backed emerging businesses. Here at CFGI, we place a high value on a culture of continued learning, where teamwork is encouraged, and professional excellence is rewarded. In 2022, CFGI opened its London office (its first outside the US) and achieved fantastic revenue in the first full year of trading, primarily derived from the accounting advisory practice. In January 2023 the UK tax practice was formed and the UK tax partner is looking to quickly assemble a high-quality team of tax professionals to grow the tax business and provide clients with an exceptional and differentiated service. Overview of role: CFGI seeks a highly motivated tax director to join its UK tax team. This role will provide a fantastic opportunity for an individual who is driven, entrepreneurial and constantly looking to challenge the status quo around the UK tax services industry. You will be involved in all aspects of UK corporate tax (advisory, compliance, reporting and governance) and will have direct interaction with both our clients and senior members of the UK tax team in order to deliver these services. 1. Client service delivery a) Tax advisory You will be involved in tax advisory work likely to include the following: · Ad hoc corporate tax advisory work originating from compliance engagements – e.g. loss planning and utilization, tax implications of trade and asset transfers, interest deductibility. · Cash tax modelling exercises. · Group simplification exercises. · Tax due diligence for client transactions. · Tax structuring for client transactions. It is likely that a significant proportion of tax advisory work will arise on private equity backed clients and therefore an advanced understanding of the tax implications of the private equity ownership model and the investment lifecycle are highly desirable. You should have knowledge / experience of advising clients on some or all of the following: · Immediate post-acquisition tax actions, e.g. preparation of “post-acq tax checklist”, implementation of any structural actions, remediation of key tax DD items, withholding tax management, and coverage of non-corporate tax items such as VAT on transaction costs. · Refinancing, bolt-ons, group simplification and reorganization. · Tax compliance related advisory (e.g. interest deductibility, anti-hybrids, transaction costs). · Exit readiness (e.g. healthcheck reviews). · Exit support (vendor assist role: tax DD support and negotiation, exit structuring, transaction balance sheet). b) UK corporation tax compliance, reporting and governance: You will be responsible for overseeing the preparation and submission of UK corporation tax returns for our clients. In collaboration with the UK Tax Partner, you will assist with the design and implementation of a UK corporation tax compliance service offering, that is high quality, efficient and cost effective for our clients, and optimizes the involvement of junior team members to manage the provision of these services and lead the day-to-day relationships with our clients. Your client engagements may also require you to have some involvement with tax reporting and governance matters. 2. Business development As CFGI is looking to rapidly expand in the UK, there will be plenty of opportunity to get involved in business development activities. As a director, you will be expected to undertake business development activity to help grow the UK tax practice and the CFGI brand in the UK. Business development activities will include: · Assisting with the origination of tax opportunities on new and existing clients, drafting of proposals and involvement in the sales process (e.g. meetings, pitches, etc.). · Teaming with colleagues from other CFGI UK and US service areas (e.g. accounting advisory, business transformation) to identify and propose tax opportunities. · Teaming with the CFGI US tax team to support with and identify UK tax opportunities on US clients. · Identifying additional revenue streams with our clients. Skills and Competencies: Knowledge: · Significant experience of scoping, leading and managing UK tax advisory projects. · Experience of working on UK transactions and involvement in diligence and structuring (e.g. for buyside buyout or bolt-on). · Experience of the UK tax return preparation process, and good technical understanding with common tax adjusting items such as interest deductibility, hybrid mismatches, loss utilization etc. · Knowledge of UK tax accounting and reporting processes under IFRS and UK GAAP. · Experience of responding to and managing HMRC tax enquiries. · High level knowledge / an appreciation of the principles of non-corporate tax areas, such as VAT, payroll taxes and share schemes. · Knowledge / an appreciation of cross-border tax matters, e.g. transfer pricing, BEPS Pillar 2, country by country reporting etc. Skills: · Experienced with using Microsoft Excel and tax software packages. · Demonstrated ability to effectively present information and appropriately respond to questions from clients and team members. · Excellent organizational skills, ability to multi-task, and work under deadlines. · Excellent analytical, supervisory, organizational, and written and verbal communication skills are necessary. · Demonstrated ability to be accountable for independently completing assignments. · Capable of collaborating and communicating with people of different technical backgrounds and roles. · Analytical ability to navigate work-related situations with practicality, sound reasoning, and demonstrating creativity in problem solving. · Other key characteristics: the ideal candidate must demonstrate integrity and accountability, always remaining flexible, adaptable, and willing to accept coaching, building and managing professionally healthy relationships, and continually developing awareness of business-related topics. Qualifications: · Seven plus years plus of corporate tax experience with some/all of this time ideally spent in the Big 4. · Professional accounting qualification (e.g. ACA, ACCA) required; additional tax qualification (e.g. CTA) strongly desired.

Food Safety Consultant/Auditor Primary locations: London & North West - but strong candidates from other areas could also be considered. Hybrid Working – A Mix of Client Visits and Remote Flexibility About Food Alert & The Citation Group With offices in London and Wellingborough, Food Alert is a leading food safety and health & safety consultancy working across the UK. We specialise in the hospitality sector supporting standout names like BrewDog, Dishoom, The Ivy Collection, and Citizen M, while also serving clients in retail, leisure, education, and healthcare. We’re part of The Citation Group, one of the UK’s leading providers of Health & Safety, HR, Employment Law, and ISO services. With 110,000+ clients, 15 acquisitions in 3 years, and backing from KKR, Hg Capital, and HarbourVest, our growth is accelerating—and we want you to be part of it. At Citation, we don’t just provide jobs; we build careers that inspire and empower. We’re a fast-paced, forward-thinking group that values action over politics, people over process, and passion in everything we do. What You’ll Be Doing • Conducting food safety and health & safety inspections and records audits at client premises., • Producing compliance reports and practical recommendations for clients following each visit., • Delivering risk assessments: including occupational, manual handling and PPE - particularly in hospitality environments., • Supporting new client onboarding, including the implementation of our digital compliance platform, ALERT65., • Providing tailored advice, consultancy and training to clients across a wide range of environments., • Acting as Account Manager for a number of clients - typically individual or small group hospitality operators., • Conducting investigations into allegations such as food poisoning, allergen incidents or foreign body contamination., • Participating in our Advice Line rota, offering reactive expert guidance and managing investigations., • Offering constructive feedback to internal teams, including IT (for platform improvements) and Operations, to support continuous improvement., • Engaging in internal training (CPD) and team development., • Managing communications efficiently—responding to client and internal queries in a timely and professional manner. What We’re Looking For • A solid background in food safety and health & safety auditing, ideally in hospitality. A minimum Level 4 Food Safety qualification is essential, with a BSc in Environmental Health or equivalent industry experience highly desirable., • Experience auditing high-risk operations such as hotels with spa/swimming pool facilities would be a distinct advantage., • Excellent time management, communication, and organisational skills - you’ll need to manage a busy and varied caseload., • An adaptable and relationship-led approach; client experience is everything to us., • Driving Licence and car needed as travelling to clients regularly Who You Are • Personable and customer-focused, with the ability to build long-term client relationships., • Confident and constructive: someone who can influence change and drive high standards., • Self-motivated with strong problem-solving and process-thinking capabilities., • A true team player who contributes to a positive, proactive culture. Why Join Us • Tailored on-the-job training, mentoring and progression support., • 25 days’ holiday + bank holidays + 3 ‘gift days’ over the festive period., • Additional leave benefits (e.g. marriage week, new grandparent leave)., • Enhanced sick pay and life insurance., • Employee Assistance Programme, • Healthcare cash plan including discounted gym membership., • Referral bonuses, incentive vouchers and team socials—we know how to celebrate!

Bytes is a top provider of premium IT solutions and services, working with SMEs, corporations, and public sector organizations to modernize and digitally transform their IT infrastructures. Founded in 1982, Bytes has experienced significant growth, now employing over 750 people across seven locations in the UK and Ireland, with a turnover surpassing £1.8 billion in 2023. At Bytes, we nurture talented individuals to achieve remarkable outcomes and are dedicated to supporting our employees through continuous training, guidance, and development to help you advance and fulfil your career goals. We foster a culture of innovation, collaboration, recognition and inclusivity and offer a wide range of benefits to support staff wellbeing. PURPOSE OF JOB: We are seeking an experienced Governance, Risk & Compliance (GRC) Consultant to join our growing cyber security team. You will deliver high-quality GRC services to a diverse client base, help build in-house capability for core offerings, and support the integration of GRC with our Assurance and DFIM service lines. With 3+ years’ experience in information security, data protection, risk management, enterprise IT, legal, or compliance roles, you will have a proven track record of delivering GRC consultancy across sectors. You will demonstrate strong knowledge of frameworks such as ISO, ISF, NIST CSF, NIS/NIS2, DORA, CIS, and Cyber Essentials, and the ability to explain complex requirements clearly to both technical and non-technical audiences. You will have experience engaging with enterprise clients, vendors, auditors, and regulators. Skilled at producing clear, concise reports, you will translate technical findings into business-focused recommendations that support informed decision-making. A hands-on and collaborative approach is essential, balancing strategic oversight with direct delivery. You will be confident in mentoring colleagues, influencing senior stakeholders, and working closely with sales to scope and shape new business opportunities. Reporting to the Head of Assurance Testing, you will actively contribute to client delivery while having dedicated time for professional development, including industry-recognised certifications. This role offers the opportunity to work on high-impact projects within a forward-thinking, supportive environment that values expertise, innovation, and growth. KEY RESPONSIBILITIES: • Deliver high-quality GRC services, including:, • ISO 27001, • NIST Gap Analysis, • CAF Assessments, • PCI DSS, • CSMA, ISF, and CIS Assessments, • Develop and maintain in-house methodologies, templates, and delivery playbooks for core GRC services., • Conduct client workshops, interviews, and assessments to gather requirements and provide actionable recommendations., • Produce clear, concise, and accurate reports, Statements of Work, and other deliverables., • Collaborate with internal teams to integrate GRC services into Assurance and DFIM offerings., • Support Incident Management and Assurance engagements as required., • Provide pre-sales support, including scoping engagements, defining deliverables, and contributing to proposals., • Maintain up-to-date knowledge of industry frameworks, standards, and regulatory changes., • Identify opportunities for service improvement and cross-selling. INDIVIDUAL RESPONSIBILITIES • Deliver high quality GRC consultancy services, • Ensure all deliverables meet defined quality standards and client expectations, • Actively participate in internal training, enablement sessions, and professional development activities., • Share knowledge and expertise with peers to build team capability., • Uphold the highest ethical standards in all interactions with clients, colleagues, and partners., • Manage workload effectively, balancing delivery commitments with learning and development goals. QUALIFICATIONS, EXPERIENCE, & SKILLS: Educational Requirements • Degree in Information Security, Computer Science, Risk Management, or a related field, or equivalent professional experience. - ESSENTIAL Professional Experience One or more of the following: • ISO 27001 Lead Auditor or Lead Implementer certification, • PCI DSS Qualified Security Assessor (QSA) or Internal Security Assessor (ISA), • NIST Cybersecurity Framework or CAF-related training/accreditation, • Certified Information Systems Security Professional (CISSP), • Certified Information Security Manager (CISM), • Certified Information Systems Auditor (CISA), • Certified in Risk and Information Systems Control (CRISC) Years of Experience • Minimum 3 years’ experience delivering GRC services in a consultancy or in-house security role. - ESSENTIAL, • Proven track record of managing client-facing projects from scoping through to delivery.- DESIRABLE, • Experience working across multiple sectors, including regulated industries (e.g., finance, healthcare, government). - DESIRABLE, • Experience supporting Incident Response planning, tabletop exercises, or assurance testing engagements. - DESIRABLE Other Requirements • Strong understanding of governance, risk, and compliance principles, including key frameworks and regulations such as ISO 27001, NIST CSF, CAF, PCI DSS, and GDPR. - ESSENTIAL, • Excellent written and verbal communication skills, with the ability to translate technical requirements into business language. - ESSENTIAL, • Ability to travel to client sites as required. - ESSENTIAL CORE COMPETENCIES & SKILLS • GRC Experience, • Business acumen, • Strong communicator, • Friendly and approachable, • Calm and considered, • Strong code of ethics and morals

AVP - Internal Auditor (Cyber Security) London, Docklands (Hybrid) £85,000 - £90,000 per annum + annual discretionary bonus On behalf of a Leading financial services organisation, I am seeking an experienced Internal Auditor with a background in a Cyber Security environment. The internal auditor will be primarily focused on leading audits, continuous monitoring, issue validation, and leading on departmental improvement initiatives. The organisation offers hybrid working with a non-negotiable 2 days a week in their London office, therefore you must be within reasonable commuting distance to London. Responsibilities: • Develop and maintain working relationships with peers across the organization., • To monitor strategic developments within the business to highlight any unidentified risks or potential control issues., • Perform continuous monitoring of the business through frequent stakeholder engagement, under the direction of the director, to identify emerging risks and issues and report to audit management., • Identify areas for improvement within Internal Audit and play a leading role on department improvement initiatives., • Support and provide input into the Internal Audit risk assessment process to inform the Audit Plan., • Execution of planning and testing for complex technology, information security audits and high-level reviews, including designing test strategies, audit test papers and drafting of audit findings., • Validation to confirm management's remediation of audit and regulatory issues., • Management and tracking of businesses remediation activities., • Actively contributing to the ongoing improvement of audit practices and methodology., • Proactively maintain knowledge, skills, and disciplines, with on-going professional development., • Identify and share useful learning opportunities for other Internal Audit team members., • Maintain the professional standard of the Internal Audit function and work within its agreed Terms of Reference and IIA standards/guidelines, Charter, and Mandate., • Experience working within Internal Audit in a financial services environment (ideally banking) and audit experience across a range of different information technology in a financial institution., • Ability to provide technical subject matter expertise during integrated audits., • Excellent communication skills, both written and verbal., • Experience and understanding of regulatory requirements, eg, FRBNY, FCA., • Strong IT security and technical knowledge with approximately 8 years of experience within the industry., • Working experience with common security/technology risk frameworks, for instance, ISO 27000, NIST, CIS Critical Security Controls, COBIT, and IIA GTAGs., • Working experience with regulatory standards/requirements (US, UK) ie, GDPR, BCBS 239, FFIEC 101, 3402, CHAP., • Working experience and/or knowledge of Security domains including Access management, Threat management, Incident response and recovery, Data protection, Vulnerability management, Monitoring and logging, Physical security, and Security risk management and governance., • Working experience and/or knowledge of cloud, block chain, high volume transaction systems., • Working experience and/or knowledge of application controls, input/output, configuration, application controls., • Working experience and/or knowledge of data analytics/predictive analytics, data governance., • Understand policy/directives, and ability to assess risks across all types of IT systems and operations., • Audit/Project Management Certifications (desirable) - CMIIA (UK), CIA (US), CISA, CGEIT, CISSP, CISM, CompTIA, SANS, ISC2, Prince2, Agile etc.

VP - Internal Auditor (Cyber Security) London, Docklands (Hybrid) £100,000 - £110,000 per annum + annual discretionary bonus On behalf of a Leading financial services organisation, I am seeking an experienced Internal Auditor with a background in a Cyber Security environment. The Vice President will be primarily focused on leading audits, continuous monitoring, issue validation, and leading on departmental improvement initiatives. It is important that the Vice President be versatile and flexible in working in a team on a larger/complex audit, or individually on less complex audits under the direction of the Director. The organisation offers hybrid working with a non-negotiable 2 days a week in their London office, therefore you must be within reasonable commuting distance to London. Responsibilities: • Develop and maintain working relationships with peers across the organization., • To monitor strategic developments within the business to highlight any unidentified risks or potential control issues., • Perform continuous monitoring of the business through frequent stakeholder engagement, under the direction of the director, to identify emerging risks and issues and report to audit management and the Audit & Finance Committee., • Identify areas for improvement within Internal Audit and play a leading role on department improvement initiatives., • Support and provide input into the Internal Audit risk assessment process to inform the Audit Plan., • Support the director in strategic improvements including Continuous Auditing, Data Analytics, Development of control Dashboards, and Automated Testing Capabilities., • Stand in for the director in times of absence to represent the Internal Audit Information Security team at Tollgates, Continuous Monitoring sessions, and provide Senior Management with progress updates., • Execution of planning and testing for complex technology, information security audits and high-level reviews, including designing test strategies, audit test papers and drafting of audit findings., • Soft reviews of and coaching to more junior IA members' work (Senior Associate and Associate)., • Validation to confirm management's remediation of audit and regulatory issues., • Management and tracking of businesses remediation activities., • Actively contributing to the ongoing improvement of audit practices and methodology., • Assist the wider Internal Audit Division in areas of Information Security, including participating in integrated audits, providing Subject Matter Expertise (SME) in planning activities, and knowledge sharing., • Provide timely progress updates within the reporting system and to the director in the daily stand-up calls., • Proactively maintain knowledge, skills, and disciplines, with on-going professional development., • Identify and share useful learning opportunities for other Internal Audit team members., • Maintain the professional standard of the Internal Audit function and work within its agreed Terms of Reference and IIA standards/guidelines, Charter, and Mandate., • Experience working within Internal Audit in a financial services environment (ideally banking) and audit experience across a range of different information technology in a financial institution., • Ability to provide technical Subject Matter Expertise during integrated audits., • Experience and understanding of regulatory requirements, eg, FRBNY, FCA., • Strong IT security and technical knowledge with approximately 8+ years of experience within the industry., • Working experience with common security/technology risk frameworks, for instance, ISO 27000, NIST, CIS Critical Security Controls, Cloud Controls Matrix, COBIT, and IIA GTAGs., • Working experience with regulatory standards/requirements (US, UK) ie, GDPR, BCBS 239, FFIEC 101, 3402, CHAP., • Working experience and/or knowledge of Security domains including Access management, Threat management, Incident response and recovery, Data protection, Vulnerability management, Monitoring and logging, Physical security, and Security risk management and governance., • Working experience and/or knowledge of application controls, input/output, configuration, application controls., • Confident in managing integrated and non-integrated audits, and leading other audit team members., • Excellent interpersonal and communications skills (verbal and written), including the ability to deliver challenging messages at all levels of management., • Ability to engage stakeholders., • Innovative problem-solving approach. Able to think on a broad scale about issues affecting the company, not just those related to IA or the control environment., • Able to interpret internal and external issues and recommend solutions/best practices., • Audit/Project Management Certifications (desirable) - CMIIA (UK), CIA (US), CISA, CGEIT, CISSP, CISM, CompTIA, SANS, ISC2, Prince2, Agile etc.

About CFGI: Corporate Finance Group, Inc. (“CFGI”) was founded in 2000 by former Big 4 professionals. CFGI is an established industry leader with the resources to successfully navigate today’s complex accounting, reporting, compliance and now tax landscape. An assemblage of top-flight professionals with in-depth public accounting expertise, CFGI can fulfill a variety of client needs without the restrictions of auditor independence. We provide our clients with a unique combination of integrity, flexibility, creative solutions, and deep tax technical expertise. Many of our clients are global, market leading, publicly held companies, while others are privately held, early stage, or venture-backed emerging businesses. Here at CFGI, we place a high value on a culture of continued learning, where teamwork is encouraged, and professional excellence is rewarded. We offer a flexible career progression model that allows for a variety of challenging opportunities throughout your career. In 2022, CFGI opened its London office (its first outside the US) and achieved fantastic revenue in the first full year of trading, primarily derived from the accounting advisory practice. In January 2023 the UK tax practice was formed and the UK tax partner is looking to quickly assemble a high-quality team of tax professionals to grow the tax business and provide clients with an exceptional and differentiated service. Position Summary: CFGI seeks a highly motivated tax managing director to lead its' UK M&A tax offering. CFGI's unique client base of venture/PE- backed privately held companies to global multi-billion-dollar FTSE500 Companies provides for a unique environment for highly motived self-starters to continue and enhance their careers. This position reports directly to the Partner-in-Charge of Tax and will require an in-depth knowledge of taxation as it relates to strategic PE and corporate transactions in the mergers and acquisitions lifecycle. Our Transactions Tax specialists provide a variety of services, such a tax due diligence reviews (buy-side and sell-side), advice relating to private equity and similar structures, vendor assistance, and management tax planning. The successful candidate will work with business lines, service providers, and other tax professionals in fulfilling his or her responsibilities. In the beginning, tax work is not expected to require 100% of the executive’s time for project management and billable work, as they will be asked to do other tasks including: · Interviewing and recruiting new tax team members to work under their direction. · Business Development activity, including getting to know the partners at CFGI within all verticals. · Identifying additional revenue streams within our clients. Principal Responsibilities: · Lead M&A tax projects in accordance with the firm’s standard procedures and agreed arrangements with the client, including costs and billing logistics. · Perform tax due diligence reviews, tax structuring, tax modelling, and various other pre- and post- deal services. · Act as the main point of contact and manage client relationships, responding quickly to queries and internal teams. · Research and prepare proposals for new work, as well as taking part in presentations to prospective clients. · Support in strategic targeting and business development activity, particularly in the private equity space, with the Tax Partner. · Act as a people manager, including delegation and taking an active role in individuals’ training and career development via on-the-job coaching, delivering formal training, and carrying out requested feedback and career conversations. Skills and Competencies: · Strong expertise in tax due diligence, structuring, fund flows, and SPA review, ideally with private equity clients. · Exposure to portfolio company tax work, UK and cross-border tax planning, and withholding tax is preferred. · Demonstrated ability to effectively present information and appropriately respond to questions from clients and team members. · Excellent organizational skills, ability to multi-task, and work under deadlines. · Excellent analytical, supervisory, organizational, and written and verbal communication skills are necessary. · Demonstrated ability to be accountable for independently completing assignments. · Capable of collaborating and communicating with people of different technical backgrounds and roles. Education and Experience Requirements: · Ten plus years of M&A tax experience in the Big-4 and/or next tier UK accounting firms. · Significant experience of operating as a Senior Manager or Associate Director level (or equivalent) is necessary. · Up-to-date knowledge of Transactions Tax, in a specialist capacity or as a Corporate Tax professional. · Strong collaboration and teamwork skills, and an ability to adapt to changing priorities and learn new businesses quickly. · Other key areas to consider: the ideal candidate must demonstrate integrity and accountability, always remaining flexible, adaptable, and willing to accept coaching, building and managing professionally healthy relationships, and continually developing awareness of business-related topics. · Analytical ability to navigate work-related situations with practicality, sound reasoning, and demonstrating creativity in problem solving. · Leadership skills that display good judgment and certainty in decision making, taking initiative with job-related demands, demonstrating innovative thinking and sound planning with business practices, managing individual performance toward shared organizational goals, and thinking strategically to set and accomplish goals. · Bachelor’s degree in accounting with a preference in holding an accounting or tax professional certification (ATII, CTA, ideally along with an ACA, ACCA).

Senior Cybersecurity GRC Consultant (Relocate to Tax Free Abu Dhabi) Abu Dhabi, United Arab Emirates | Full-time | Relocation Opportunity \n Salary: Tax-free 45,000 AED per month (up to €125,000 p/a)\n\n Our client is a rapidly growing IT consultancy partnering with leading organisations across the Middle East. They deliver end-to-end digital, data, and cybersecurity transformation programs, helping enterprises modernise securely in cloud and hybrid environments. \n\n We’re seeking a Senior Cybersecurity GRC Consultant to join the team onsite in Abu Dhabi. This is a strategic, hands-on role where you’ll help shape and maintain robust cybersecurity and compliance frameworks across complex enterprise environments. \n If you enjoy simplifying regulatory challenges, designing pragmatic governance models, and influencing security strategy at scale this could be your next move. \n\n Translate international standards (NIST CSF, ISO 27001, GDPR, SOC 2, PCI DSS, CSA CCM) into actionable policies and controls. \n Design and implement unified compliance frameworks across cloud, hybrid, and enterprise systems. \n Lead internal and external audits, certification readiness, and regulatory assurance activities. \n Conduct risk assessments, control testing, and third-party assurance programs. \n Prepare and deliver executive-level compliance reports and dashboards. \n 6–8+ years’ experience in cybersecurity governance, risk, and compliance. \n~ Strong background in GDPR and data protection frameworks (European experience preferred). \n~ Hands-on experience with major cloud environments (AWS, Azure, or GCP). \n~ Strong knowledge of compliance automation tools (ServiceNow GRC, OneTrust, Archer, or similar). \n~ CISM, CISA, CRISC, CISSP, ISO 27001 Lead Implementer/Auditor, CCSK, AWS Security Specialty, GDPR Practitioner. \n\n If you’re a cybersecurity professional passionate about compliance and looking to take on a new challenge, Apply Now!

Senior Cybersecurity GRC Consultant (Relocate to Tax Free Abu Dhabi) Abu Dhabi, United Arab Emirates | Full-time | Relocation Opportunity \n Salary: Tax-free 45,000 AED per month (up to €125,000 p/a)\n\n Our client is a rapidly growing IT consultancy partnering with leading organisations across the Middle East. They deliver end-to-end digital, data, and cybersecurity transformation programs, helping enterprises modernise securely in cloud and hybrid environments. \n\n We’re seeking a Senior Cybersecurity GRC Consultant to join the team onsite in Abu Dhabi. This is a strategic, hands-on role where you’ll help shape and maintain robust cybersecurity and compliance frameworks across complex enterprise environments. \n If you enjoy simplifying regulatory challenges, designing pragmatic governance models, and influencing security strategy at scale this could be your next move. \n\n Translate international standards (NIST CSF, ISO 27001, GDPR, SOC 2, PCI DSS, CSA CCM) into actionable policies and controls. \n Design and implement unified compliance frameworks across cloud, hybrid, and enterprise systems. \n Lead internal and external audits, certification readiness, and regulatory assurance activities. \n Conduct risk assessments, control testing, and third-party assurance programs. \n Prepare and deliver executive-level compliance reports and dashboards. \n 6–8+ years’ experience in cybersecurity governance, risk, and compliance. \n~ Strong background in GDPR and data protection frameworks (European experience preferred). \n~ Hands-on experience with major cloud environments (AWS, Azure, or GCP). \n~ Strong knowledge of compliance automation tools (ServiceNow GRC, OneTrust, Archer, or similar). \n~ CISM, CISA, CRISC, CISSP, ISO 27001 Lead Implementer/Auditor, CCSK, AWS Security Specialty, GDPR Practitioner. \n\n If you’re a cybersecurity professional passionate about compliance and looking to take on a new challenge, Apply Now!

Senior Cybersecurity GRC Consultant (Relocate to Tax Free Abu Dhabi) Abu Dhabi, United Arab Emirates | Full-time | Relocation Opportunity \n Salary: Tax-free 45,000 AED per month (up to €125,000 p/a)\n\n Our client is a rapidly growing IT consultancy partnering with leading organisations across the Middle East. They deliver end-to-end digital, data, and cybersecurity transformation programs, helping enterprises modernise securely in cloud and hybrid environments. \n\n We’re seeking a Senior Cybersecurity GRC Consultant to join the team onsite in Abu Dhabi. This is a strategic, hands-on role where you’ll help shape and maintain robust cybersecurity and compliance frameworks across complex enterprise environments. \n If you enjoy simplifying regulatory challenges, designing pragmatic governance models, and influencing security strategy at scale this could be your next move. \n\n Translate international standards (NIST CSF, ISO 27001, GDPR, SOC 2, PCI DSS, CSA CCM) into actionable policies and controls. \n Design and implement unified compliance frameworks across cloud, hybrid, and enterprise systems. \n Lead internal and external audits, certification readiness, and regulatory assurance activities. \n Conduct risk assessments, control testing, and third-party assurance programs. \n Prepare and deliver executive-level compliance reports and dashboards. \n 6–8+ years’ experience in cybersecurity governance, risk, and compliance. \n~ Strong background in GDPR and data protection frameworks (European experience preferred). \n~ Hands-on experience with major cloud environments (AWS, Azure, or GCP). \n~ Strong knowledge of compliance automation tools (ServiceNow GRC, OneTrust, Archer, or similar). \n~ CISM, CISA, CRISC, CISSP, ISO 27001 Lead Implementer/Auditor, CCSK, AWS Security Specialty, GDPR Practitioner. \n\n If you’re a cybersecurity professional passionate about compliance and looking to take on a new challenge, Apply Now!

Senior Cybersecurity GRC Consultant (Relocate to Tax Free Abu Dhabi) Abu Dhabi, United Arab Emirates | Full-time | Relocation Opportunity \n Salary: Tax-free 45,000 AED per month (up to €125,000 p/a)\n\n Our client is a rapidly growing IT consultancy partnering with leading organisations across the Middle East. They deliver end-to-end digital, data, and cybersecurity transformation programs, helping enterprises modernise securely in cloud and hybrid environments. \n\n We’re seeking a Senior Cybersecurity GRC Consultant to join the team onsite in Abu Dhabi. This is a strategic, hands-on role where you’ll help shape and maintain robust cybersecurity and compliance frameworks across complex enterprise environments. \n If you enjoy simplifying regulatory challenges, designing pragmatic governance models, and influencing security strategy at scale this could be your next move. \n\n Translate international standards (NIST CSF, ISO 27001, GDPR, SOC 2, PCI DSS, CSA CCM) into actionable policies and controls. \n Design and implement unified compliance frameworks across cloud, hybrid, and enterprise systems. \n Lead internal and external audits, certification readiness, and regulatory assurance activities. \n Conduct risk assessments, control testing, and third-party assurance programs. \n Prepare and deliver executive-level compliance reports and dashboards. \n 6–8+ years’ experience in cybersecurity governance, risk, and compliance. \n~ Strong background in GDPR and data protection frameworks (European experience preferred). \n~ Hands-on experience with major cloud environments (AWS, Azure, or GCP). \n~ Strong knowledge of compliance automation tools (ServiceNow GRC, OneTrust, Archer, or similar). \n~ CISM, CISA, CRISC, CISSP, ISO 27001 Lead Implementer/Auditor, CCSK, AWS Security Specialty, GDPR Practitioner. \n\n If you’re a cybersecurity professional passionate about compliance and looking to take on a new challenge, Apply Now!

Senior Cybersecurity GRC Consultant (Relocate to Tax Free Abu Dhabi) Abu Dhabi, United Arab Emirates | Full-time | Relocation Opportunity \n Salary: Tax-free 45,000 AED per month (up to €125,000 p/a)\n\n Our client is a rapidly growing IT consultancy partnering with leading organisations across the Middle East. They deliver end-to-end digital, data, and cybersecurity transformation programs, helping enterprises modernise securely in cloud and hybrid environments. \n\n We’re seeking a Senior Cybersecurity GRC Consultant to join the team onsite in Abu Dhabi. This is a strategic, hands-on role where you’ll help shape and maintain robust cybersecurity and compliance frameworks across complex enterprise environments. \n If you enjoy simplifying regulatory challenges, designing pragmatic governance models, and influencing security strategy at scale this could be your next move. \n\n Translate international standards (NIST CSF, ISO 27001, GDPR, SOC 2, PCI DSS, CSA CCM) into actionable policies and controls. \n Design and implement unified compliance frameworks across cloud, hybrid, and enterprise systems. \n Lead internal and external audits, certification readiness, and regulatory assurance activities. \n Conduct risk assessments, control testing, and third-party assurance programs. \n Prepare and deliver executive-level compliance reports and dashboards. \n 6–8+ years’ experience in cybersecurity governance, risk, and compliance. \n~ Strong background in GDPR and data protection frameworks (European experience preferred). \n~ Hands-on experience with major cloud environments (AWS, Azure, or GCP). \n~ Strong knowledge of compliance automation tools (ServiceNow GRC, OneTrust, Archer, or similar). \n~ CISM, CISA, CRISC, CISSP, ISO 27001 Lead Implementer/Auditor, CCSK, AWS Security Specialty, GDPR Practitioner. \n\n If you’re a cybersecurity professional passionate about compliance and looking to take on a new challenge, Apply Now!

About the Role ControlCase is seeking a Senior IT Security Assessor to join our growing global team. In this fully remote UK-based role, you will conduct IT security audits and assessments for clients across the United Kingdom and the European region, ensuring compliance with PCI DSS, ISO 27001/2, GDPR, NIS2, DORA, and other relevant frameworks. This position offers the opportunity to become a PCI QSA (training and certification sponsored by ControlCase) while working in an international, collaborative, and growth-focused environment. Responsibilities • Lead client audits and compliance assessments across multiple frameworks., • Review and analyze systems, applications, databases, and network devices., • Assess cloud environments including AWS, Azure, and GCP., • Define audit scope, identify risks, and recommend improvements., • Provide compliance consulting to help clients meet regulatory requirements., • Produce final audit and compliance reports., • Collaborate with internal QA, project managers, and delivery teams., • Maintain professional certifications and stay current with industry standards. Qualifications and Skills • 4–5 years of IT security auditing or consulting experience., • Bachelor’s degree in information security or related field., • Deep knowledge of IT security controls, access management, logging, vulnerability assessment, and secure system configuration., • Experience with PCI DSS, ISO 27001/2, GDPR, NIS2, DORA, or similar compliance frameworks., • Strong understanding of cloud environments and network architectures., • Excellent English communication skills; fluency in German strongly preferred., • At least one certification from each of the following groups preferred: • Group 1: CISA, ISO 27001 Lead Auditor, • Group 2: CISSP, ISO 27001 Lead Implementer, CISM

Operational Technology IT Auditor,. Business Risk Services and support our clients and internal teams on short to medium-term assignments.

We are a $13+ billion global technology company, home to more than 224,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud, and AI, powered by a broad portfolio of technology services and products. HCLTech is a globally recognized leader in the Tech and IT industry, but we’ve never forgotten the startup mindset that got us here. We’ve always approached our work with an idea-first attitude because every one of our accomplishments —no matter how big or small —can be traced back to an idea’s single spark. It’s that spark —that inner drive —that sets our people apart from our competitors. It enables us not just to pull off game-changing feat after game-changing feat but to better our world in the process. We want you to find your spark. Because that’s what drives you to be better, be more and ultimately, be more fulfilled. Role- Regional Lead – Governance, Risk and Compliance & Business Resiliency Location- UK, London Job Type- Full Onsite (5 days a week) Full time Employment - Permanent KEY RESPONSIBILITIES & JOB DESCRIPTION: • Responsible for Business development of HCL Governance, Risk and Compliance services and Business Resiliency services in UK & Europe region. This job carries the booking targets and revenues to be achieved. • Responsible for P&L and Client relationship management, • GRC opportunity farming in existing client accounts as well as working with regional sales for developing new accounts. • Managing sales, pre-sales and delivery team of consultants for all regional engagements • Designing solutions related to Cyber Risk engagement on assessment and implementation of frameworks such as NIST 800-53 r5, NIST CSF2.0, CIS, ISO27K • Designing solutions related to advisory & consulting engagements around regulatory risk & compliances such as DORA, NIS2, GDPR, SOX ITGC, PCI-DSS, HIPAA, Data Privacy, NHS, FFIEC etc. • Develop knowledge base, re-usable components for GRC advisory services., • Responsible for development and enhancements of GRC services, team and delivery capabilities. • Manage local partners and develop partner sales channel Skills: • Expertise in creation of solutions for risk and compliance advisory services (preferable candidates from Big4 organizations) • Capabilities of executing atleast 3-4 advisory/consulting engagements., • Technical Knowledge around information security, business continuity and technology risk assessments. ISO 27K, NIST, AI Governance, CIS etc., • Good compliance understanding of industry domains such as BFSI – (SOX, FFIEC, PCI-DSS, BASEL, MAS etc.), Healthcare & Life-sciences – (HIPAA, Hi-Trust, FDA CFR, GxP Compliance), Telecom, Retail, Data Privacy (GDPR, CCPA) Energy & Utilities (NERC, FERC) Information Security (ISO 27000, NIST, CIS) TPRM • Business Resiliency & Cyber Recovery, ZTA, • GRC Project & Program Management, • Excellent written and verbal communications skills, • Should be able to travel 70%-80% on short as well as long term engagements. PLATFORM /TOOL EXPERTISE • Experience on the below mentioned tools is not mandated but candidates having exposure to these will be preferred: • MetricStream, Archer, ServiceNow GRC & SecOps, OneTrust QUALIFICATIONS B.E/B.Tech with MBA preferred. Candidates with following Certifications will be preferred: • CISA/CGEIT/CISM/CISSP/CIPP E, • ISO 27001 Implementer, Lead Auditor, • ITIL V3.0

Information Security Officer – International Law Firm (London-Based) Permanent | Hybrid Working | Competitive Salary I am working with a leading international law firm to support their search for an experienced and proactive Information Security Officer (ISO) to lead their global information and data security programme. This senior-level role offers the opportunity to shape the firm’s long-term security strategy, drive ISO 27001 certification, and ensure the resilience of systems and data across offices in the UK, US, and Europe. The position reports to the Director of IT and works closely with regional IT teams and external partners. Key Responsibilities: • Lead the firm’s information security governance framework across all offices and platforms, • Maintain and enhance the ISO 27001-aligned Information Security Management System (ISMS), • Ensure compliance with frameworks including CIS Controls, NIST, ISO 27701, and GDPR, • Oversee incident response, threat detection, and access governance across systems such as iManage, Intapp, Aderant, Microsoft 365, and Azure, • Drive firm-wide security awareness and training initiatives, • Monitor regulatory changes and emerging threats, and advise on best practices Ideal Candidate Profile: • Strong knowledge of ISO 27001 implementation and certification, • Experience in a professional services or legal environment, • Familiarity with Microsoft 365 Defender, SentinelOne, Purview, and Azure security tools, • Skilled in managing access controls and security operations across enterprise platforms, • Excellent communication and stakeholder engagement skills Desirable Attributes: • Certifications such as CISM, CISSP, or ISO 27001 Lead Implementer/Auditor, • Experience working with MDR/XDR partners and tools like Trustwave, Mimecast, or FortiGate, • A background in mentoring and promoting a security-conscious culture This is a London-based role with hybrid working and a collaborative, forward-thinking environment. If you are looking to make a strategic impact in a global legal setting, I would be pleased to share further details. Due to the high volume of applications, we are not able to respond to all enquiries. If you have not received a response within 72 hours, please assume you have not been shortlisted at this stage, however thank you for taking the time to apply. Ryder Reid Legal is a recruitment specialist. For over thirty years we've been connecting legal talent with many of the leading law firms in London and internationally. Follow our LinkedIn page for the latest vacancies.

The National Audit Office (NAO) supports the Comptroller and Auditor General (C&AG) in his role as the statutory auditor of government departments, the BBC and a wide range of other public bodies, reporting directly to Parliament. Independent of government, the NAO scrutinises public spending for Parliament and investigates major government projects and programmes. The resulting reports support high profile inquiries by the Public Accounts Committee and other select committees of the House of Commons and play an important role in improving the use of public money and outcomes for citizens. The term of office of the current Chair, Dame Fiona Reynolds, will come to an end in January 2027, and Parliament is seeking to appoint her successor. This is an important role within a high-profile organisation, with responsibility for providing leadership and direction to the Board. The Chair of the NAO plays a pivotal part in shaping the strategic direction of the NAO, ensuring it remains at the forefront of public audit, value for money scrutiny and innovation. We are looking for a breadth of candidates who genuinely bring a range of experience from a variety of different backgrounds. Candidates will require financial acumen, but auditing experience / qualification is not required. We are looking for politically astute individuals with an awareness of the workings of both local and national government and Parliament, the context of the NAO’s work and Parliamentary accountability. Candidates will have experience at senior Board level and will bring strong intellect, sound judgement, common sense and diplomacy. The successful candidate will bring knowledge of governance and will be able to help shape strategy, develop robust governance arrangements and monitor performance. Saxton Bampfylde Ltd is acting as an employment agency advisor to the House of Commons on this appointment. For further information about the role, including details about how to apply, please visit using reference OAJXH. Alternatively email ___. Applications should be received by noon on Monday 24th November.

The role supports the IT Lead Auditor in ensuring the IT control environment meets SOX standards, with up to 10% travel. Collaborating with management and external auditors. Degree educated; IT Audit (CISA) or Security (CISM, CISSP) qualifications required.

As An IT Audit Assistant Manager- Service Audit Reporting Within Our Financial Services Business Risk Services (FS BRS) Team You Will. Joining us as a IT Audit Assistant Manager- Service Audit Reporting within our Financial Services Business Risk Services (FS BRS) team, the. IT Audit Assistant Manag

Discover your opportunity with Mitsubishi UFJ Financial Group (MUFG), one of the world's leading financial groups. Join MUFG, where being inspired is expected and making a meaningful impact is rewarded. MUFG is committed to embracing diversity and building an inclusive culture where all employees ar

They have an excellent opportunity for a bright and ambitious IT Auditor to join their internal audit team. You will either be working in the IT Audit/IT Risk function of a Financial Services firm or a major Consultancy. As soon as you have demonstrated your ability to do so, you will be given the o

Deliver high-quality technology audits across infrastructure, applications, and cybersecurity. We're looking for an experienced IT Auditor to join a growing Internal function within a global financial services group. Strong experience in IT/Technology Internal Audit, ideally within financial service

Discover your opportunity with Mitsubishi UFJ Financial Group (MUFG), one of the world’s leading financial groups. Join MUFG, where being inspired is expected and making a meaningful impact is rewarded. MUFG is committed to embracing diversity and building an inclusive culture where all employees

Are you passionate about IT security, compliance, and quality assurance? We're looking for an experienced IT Auditor and Quality Analyst to join our team! In this role, you’ll conduct IT audits, implement quality control protocols, and support compliance efforts to ensure our systems are secure, e

Are you passionate about IT security, compliance, and quality assurance? We’re looking for an experienced IT Auditor and Quality Analyst to join our team at KiaKia Finance! In this role, you’ll conduct IT audits, implement quality control protocols, and support compliance efforts to ensure our s