Astrum Search Engagement Hub

Principle Data Scientist - AI & Data Strategy

Surrey

Permanent

Full-time

Job ID:

40416

Published date:

23-10-2026

Summary

Level	Senior / Principal Data Scientist
Location	Chertsey head office
Working pattern	Hybrid — typically around 3 days a week on-site, with the flexibility to work from home
Reports to	Group Director of Risk and Internal Audit
Travel	Occasional international travel

Compass Group

Compass Group is a FTSE 20 and Fortune Global 500 business — the world’s leading contract catering, hospitality and support services provider. We operate in over 20 countries, across more than 50,000 client locations, serving over 5.5 billion meals a year. Food is our passion. Increasingly, data and AI are how we protect it, sharpen it and stay ahead.

The opportunity

We’re reinventing how Internal Audit works — moving from sampling and hindsight to data-led, continuous, forward-looking assurance. This is a rare chance to help build that capability from the ground up, not just run it. You’ll sit in a small, high-profile Group team with a direct line of sight to the very top of a FTSE 20, and the autonomy to make a real mark.

What you’ll do

Help shape and deliver Internal Audit’s AI and data strategy — and bring it to life.
Build machine learning and AI models that turn full data populations into sharper, earlier risk insight.
Hunt out fraud, error and control gaps with anomaly detection — across 100% of the data, not just samples.
Stand up the pipelines, dashboards and tooling that power continuous auditing across the whole audit lifecycle.
Bring auditors on the journey — coaching, training and raising data literacy across the team.
Help us assure how the business itself uses AI — model risk, fairness, transparency and governance.
Be our voice on what ‘good’ looks like, benchmarking against the best in the industry.

What you’ll bring

A quantitative mind and a track record of shipping analytics, ML or AI solutions in the real world.
Fluency in Python or R and SQL, and BI tools such as Power BI.
Hands-on machine learning, statistical modelling and AI — plus the judgement to use them responsibly.
Comfort with modern cloud and data platforms (Azure, AWS, GCP or Snowflake) and building data pipelines.
The rare knack of explaining the technical simply — and influencing senior stakeholders.
Curiosity about risk, processes and controls (internal audit experience welcome, but not essential).
A data, analytics or audit certification (e.g. CISA, CIA) is a bonus, not a must.

Why join us

Build a capability, don’t just maintain one — genuine scope to innovate.
Small, high-profile team with visibility at the most senior levels of a global business.
The backing, data and autonomy to do work that actually changes how we operate.
Hybrid working and the flexibility to balance time in the office and at home.
Career pathways across Internal Audit and the wider global business.

Read More Apply Now

Group IT Internal Audit Manager

Bedfordshire

Permanent

Full-time

Job ID:

40548

Published date:

23-10-2026

Summary

GROUP SENIOR IT INTERNAL AUDITOR

Job Title:	Senior IT Auditor	Brand/ Function:	Group Internal Audit
Job Holder	Vacancy	Reports to:	Sally King IA and Risk Director
JD Completed By:	Kubashni Sannasy	Direct reports	-
JD Completed By:	Kubashni Sannasy	Date:	01/07/2026
What is the main purpose of the job?	To provide independent, objective assurance to the Audit Committee on the effectiveness of Whitbread’s system of Technology & Data risk management and internal control environment across all business units in the UK and internationally. The role supports Whitbread in accomplishing its objectives by bringing a systematic, disciplined approach to evaluating and improving the effectiveness of risk management, control and governance, while providing consulting advice that adds value and improves operations. It also acts as a trusted advisor and critical friend to business and IT stakeholders by translating complex technology, cyber and data risks into clear business impacts for senior stakeholders and governance forums. The role is integral in delivering the strategic objectives of the Internal Audit and Risk function. The role involves working with senior stakeholders across Whitbread and therefore requires excellent interpersonal skills, strong influencing and negotiation skills, and the ability to work effectively with diverse groups. Working in small teams across all Whitbread operations, this role requires a team player with strong planning and organisational skills to carry out efficient and effective IS audits. It will involve the use of data analytics tools such as Power BI, and AI tools such as Microsoft Copilot and Claude throughout the audit lifecycle. Strong data analysis, report writing, and communication skills are required.
Who are the Job holder main customers?	The role will support the IA & Risk Director, working with Technology and Business stakeholders across all business areas (up to Director level), external auditors, and any relevant third parties, including internal audit co-source providers.

Main Tasks and Activities

Measures

Audit Planning:

- Assist and support the development of the annual internal audit plan for Whitbread, using risk, assurance and business change inputs, including risk assessments and engagement with key stakeholders, to shape a targeted IT audit plan aligned to the highest priority technology and data risks;

- Plan and scope IT internal audit reviews, including meeting key stakeholders, drafting audit Terms of Reference. Audits may include programme assurance reviews as well.

Audit Fieldwork:

- Develop RACM which includes designed and operating effectiveness testing procedures, as well as use of data analytics.

- Meet with stakeholders to understand the design of key information system controls and carry out detailed testing to identify control gaps;

- Manage relationships with key stakeholders, both business and IT, to ensure they are aware of the issues being identified through the audit;

- Where required, manage co-source resource to deliver audit fieldwork, ensuring audit evidence, testing rationale and issue traceability are clearly documented to support quality assurance and audit defensibility.

Audit Reporting:

- Draft high-quality, clear and concise audit reports which clearly distinguish between issues, root cause, risk impact, management actions and agreed ownership to support accountability and effective decision-making.

Audit Action Tracking:

- Monitor implementation of control recommendations, and assist in reporting status to the Board and Audit Committee.

Data Analytics and AI Enablement:

- Maintain and enhance existing data analytics use cases, models and dashboards, including Power BI outputs where relevant, while consistently identifying opportunities to apply data analytics and AI-enabled approaches responsibly, with appropriate data quality checks, validation and documented limitations, to improve audit planning, fieldwork, insight generation and reporting.

IT Risk Management:

- Provide guidance to stakeholders to assess and manage IT risks, including emerging technology, cyber, data, resilience and third-party risks, and understand where processes could go wrong, where key controls are IT enabled and what improvements could be made.

Programme Assurance:

- Work with the business to provide assurance on, and governance of, key IT projects and critical change activities, including consideration of delivery risk, control readiness, benefits realisation and governance effectiveness for major technology and data change programmes.

Internal Audit Best Practices:

- Develop the Internal Audit function by suggesting and driving improvements to auditing practices, methods, procedures and documentation, specifically around data analytics and integrated audits.

ExCo and Audit Committee Reporting:

- Coordinate and draft ExCo and Audit Committee reports, ensuring key messages, issue updates and supporting information are accurate, complete and issued in line with agreed reporting timelines.

Feedback from IA Management
IA KPI metrics - Timely completion of assigned audits to highest standards with positive feedback from key stakeholders; audit reports are valued by the Audit Committee & Management;
QAIP internal review with minimal comments
Audit work is thoroughly documented, there is robust tracking of open audit issues, and audit outputs demonstrate clear linkage between risk assessment, testing performed, evidence obtained, findings raised and final audit opinion.
ExCo and Audit Committee reporting packs are accurate, complete and issued in line with agreed governance timelines.
Committee reporting clearly reflects key risks, issue status, management actions and agreed decisions, with minimal rework required following review.
Existing data analytics use cases, models and dashboards remain accurate, relevant and maintained in line with audit requirements.
Data analytics implemented in all audits, driving insight to stakeholders

Qualifications

Skills

(Expert ability)

Experience

(Proven expertise)

Essential:

Educated to degree level
CISA
Knowledge of relevant IT governance, risk, control and security frameworks, e.g. COBIT, ITIL, ISF, NIST, GDPR and PCI DSS.
Knowledge of project delivery methodologies, e.g. Prince2, Agile

Essential:

Excellent written and verbal communication skills
Ability to challenge senior colleagues and influence business stakeholders with limited technical information systems expertise
Rigour/attention to detail
Ability to think conceptually
Analytical skills
Professional scepticism /ability to apply judgement
Organisation and project management
Expertise in using data tools (Power BI) and delivering impactful data analytics
Experience with data visualisation tools and techniques
Ability to design and apply AI-enabled tools responsibly, including prompts and agents, while validating outputs and maintaining professional judgement to support audit planning, analysis, documentation and reporting.

Essential:

Track record of IT auditing within a listed business with multi-site or global operations and/or Big4 professional audit firm
Experience delivering integrated IT/business process audits
Experience of providing project assurance reviews for transformational change
Expertise in delivering technical internal audits/reviews, e.g. Cyber Security, cloud, third-party technology risk, data governance, access management, and resilience

Desirable:

Computer Science, Information Technology or similar degree
Accounting qualification
Programme assurance or controls qualifications, e.g. PMP, ITIL, Prince2, Agile, SCRUM Master
Certification in AI Governance, Cybersecurity or Technology Risk

Desirable:

PowerAutomate
SQL

Desirable:

Experience of large-scale multi-site Retail or hospitality operations
Experience in auditing Oracle or other ERP systems, cloud platforms, SaaS environments, data platforms or digital customer-facing technology.

Read More Apply Now

Technology Risk Manager

London, UK

Permanent

Full-time

Job ID:

41771

Published date:

21-10-2026

Senior Internal Auditor

Lille

Permanent

Full-time

Job ID:

41738

Published date:

20-10-2026

Senior Corporate Auditor

London, UK

Permanent

Full-time

Job ID:

41705

Published date:

20-10-2026

Interim Business Continuity Manager

London, UK

Temporary

Full-time

Job ID:

41573

Published date:

09-10-2026

Summary

Interim Business Continuity Manager

Location: Mornington Crescent, Greater London House, NW1

Department: Internal Audit & Risk (IAR team)

Level: Guide (Manager Grade)

Reports to: Head of Internal Audit & Risk

Days in the office per week: Three

Company Description

We're ASOS, the online retailer for fashion lovers all around the world.

We exist to give our customers the confidence to be whoever they want to be, and that goes for our people too. At ASOS, you're free to be your true self without judgement, and channel your creativity into a platform used by millions.

Everyone needs some help showing up as their best self. We're Disability Confident Committed - let our Talent team know if you need any reasonable adjustments throughout the recruitment process.

Job Description

As Interim Business Continuity Manager, you’ll be tasked with accelerating and demonstrating risk-focussed progress of our new programme strengthening how ASOS prepares for, responds to and recovers from disruption. You’ll help shape a refreshed approach to resilience, connecting critical business operations, technology and operational recovery, crisis management and third-party resilience into a practical Group framework that supports our fast-paced global business.

Working closely with teams across Technology, Supply Chain, Customer, Commercial, Finance, People, Legal, Procurement and beyond, you’ll provide clear advice, challenge and support that helps ASOS build stronger governance, controls and operational resilience.

The Details

Play a key role in shaping and accelerating a refreshed ASOS approach to Business Continuity Management, helping to connect business continuity, disaster recovery, crisis management, critical third-party resilience, operational recovery planning into a coherent Group framework. Help drive the delivery of our maturity improvement programme and support its transition into a sustainable BAU framework.
Refresh Business Impact Assessments, coordinate plan reviews and lessons learned activities, track remediation actions, and support testing, training and exercising activities as required.
Work collaboratively with Technology, Supply Chain, Digital Product, Customer, Commercial, Finance, People, Communications, Security, Legal, Procurement and other stakeholders to align recovery objectives, dependencies, plans and testing activity across critical business services. Ensure clear roles and responsibilities within a federated ownership model where functional and technology leaders remain accountable for their own recovery capabilities.
Help ensure resilience improvement activities are aligned to ASOS' maturing Minimum Viable Company definition, critical business operations and agreed recovery objectives. Advise on development and testing of relevant runbooks, playbooks and recovery plans as required.
Support incident and crisis management activity as required, including contributing to response coordination, insurance notifications and claims processes, post-incident reviews and lessons learned.
Provide advice, challenge and training on resilience and related governance and controls. Simplify complex topics to aid understanding and engagement, while keeping recommendations practical and aligned to commercial realities.
Identify and drive opportunities for AI, data analytics and automation within resilience activities, adopting and embedding new tools, techniques and methodologies where they improve effectiveness, visibility or efficiency.
Support our culture by championing Diversity, Equity & Inclusion strategies.

We believe being together in person helps us move faster, connect more deeply, and achieve more as a team. That’s why our approach to working together includes spending at least three days a week in the office. It’s a rhythm that speeds up decision-making, helps ASOSers learn from each other more quickly, and builds the kind of culture where people can grow, create, and succeed.

Qualifications

About You

Significant experience designing and delivering business continuity, disaster recovery, crisis management, operational resilience or similar programmes in retail, operations or commercial businesses that have heavy reliance on technology. Ability to articulate risk prioritisation and focus and track and demonstrate progress to oversight committees.
Relevant professional qualification in a risk, resilience, business continuity, disaster recovery, operational resilience, controls or governance focused business area, an advantage but not essential.
Strong risk and controls awareness, experience of complex and less mature operating environments and analytical problem-solving skills.
Strong negotiation and influencing skills. A willingness to work with the business to understand commercial perspectives when defining fit for purpose governance, controls and resilience expectations. Someone who wants to make a difference and is excited about getting stuck in and adding value.
Excellent stakeholder management and relationship building skills with the ability to lead thinking on resilience risk and internal control best practice in an e-commerce retail environment.
Good verbal and written communication skills. The ability to tailor delivery of clear, powerful and succinct messages to audiences at different levels, including senior leadership and governance committees.
Self-motivated and able to work pro-actively on their own as well as within teams. A flexible multi-tasker who can deal with competing priorities and ambiguity that comes with our fast paced, ever-changing business and risk landscape.

Read More Apply Now

Financial Crime Manager & Associate Director

London, UK

Permanent

Full-time

Job ID:

41540

Published date:

07-10-2026

Summary

Financial Crime Advisory Manager and Associate Director - London UK

Hybrid Working

Manager level - £60,000 - £70,000 base + benefits + bonus

Associate Director - £75,000 - £90,000 + benefits + bonus

We have two different roles here at Astrum Search but this time, we're supporting our client with Financial Crime Advisory!

Are you a candidate who is looking to add value, join an amazing team with great culture and join a business that is growing? If you said yes, keep reading below.

The right candidate will:

- Be qualified with ACA/ACCA/CIPFA/CISI qualified

- Come ideally from a professional services background or have previous exposure working for a consulting business

- Experience working across sectors such as banking, insurance, asset or wealth management, payments or crypto, with the ability to tailor advice to different client environments

- Significant experience in financial crime prevention or advisory work, including anti-money laundering, sanctions, fraud, anti-bribery and corruption matters

- Strong technical knowledge of the regulatory environment, with experience delivering framework reviews, designing and implementing risk and control frameworks and supporting change or remediation programmes

- Manage and be able to lead teams

- This role offers the opportunity to lead engagements across areas including anti-money laundering, sanctions, fraud, anti-bribery and corruption, working closely with senior client stakeholders, compliance and risk leaders, boards and executive management.

The Associate Director will need to do all the above as well as:

- Building trusted relationships with senior client stakeholders and wider financial crime, compliance, risk and regulatory networks, acting as a recognised adviser and strengthening the business profile.
- Driving business development through proposals, tenders, networking and identifying opportunities to grow financial crime advisory services, while leading, coaching and developing junior colleagues

- Driving business development through proposals, tenders, networking and identifying opportunities to grow financial crime advisory services, while leading, coaching and developing junior colleagues

This is a fantastic time to join this team and business offering you career growth and security!

Reach out to me at Sheena@astrumsearch.com to discuss more!

Read More Apply Now

Risk Assurance Assistant Manager

Home based

Permanent

Full-time

Job ID:

41507

Published date:

05-10-2026

Internal IT Audit - Data and AI Associate Director

London

Permanent

Full-time

Job ID:

41441

Published date:

28-09-2026

Summary

Associate Director - IT Internal Audit Financial Services - (Banking, Insurance, Asset & Wealth Management)

Qualifications - CISA/CISM

Location - London hybrid working

Salary - £100,000-£110,000 base

Are you an IT auditor that focuses on Internal Audit? We have a brand new role due to business growth based in London.

Have you had experience with financial services and want to focus on more AI and data analytics driven work?

Want to be apart of a fast growing team, great culture and a team that is supportive and inclusive of one another?

If you said yes to the above, keep reading below.

The role requirements:

Own and lead complex client engagements across data governance, AI governance, AI model testing, and analytics internal audit / risk within Financial Services, managing a significant portfolio of client relationships at senior stakeholder level.

Lead strategic planning conversations with senior client stakeholders and audit committees, and oversee the preparation of terms of reference, audit plans, and engagement frameworks.
Act as the firm's subject matter expert in data governance, AI governance, AI model testing, and data analytics- providing authoritative input into engagements, overseeing fieldwork performed by junior and mid-level team members, and ensuring all work is performed in accordance with the firm's methodologies, with sufficient and appropriate testing and evidence to support key decisions.
Assist with the financial management of client relationships, including monitoring WIP, raising invoices, ensuring an adequate margin is achieved on engagements, and preparing budgets.

The right candidate will need:

Come from a previous consulting background and have financial services experience with banking, insurance or asset management
Be able to access the London office x3 per week
Knowledge and some experience of AI, Data Governance, AI Assurance
Lead large teams and inspire others
Able to develop the business, previous experience of Business Development would be key.

Reach out to me at Sheena@astrumsearch.com to find out more!

Read More Apply Now

Risk Assurance Manager

Finsbury Sq

Permanent

Full-time

Job ID:

41408

Published date:

24-09-2026

Your search query

Our use of cookies

Your search query

Send me similar jobs

Our use of cookies