Senior Manager, IT Internal Audit

Department:  FINANCE & OPERATIONS

City:  London

At Burberry, we believe creativity opens spaces. Our purpose is to unlock the power of imagination to push boundaries and open new possibilities for our people, our customers and our communities. This is the core belief that has guided Burberry since it was founded in 1856 and is central to how we operate as a company today.  

We aim to provide an environment for creative minds from different backgrounds to thrive, bringing a wide range of skills and experiences to everything we do. As a purposeful, values-driven brand, we are committed to being a force for good in the world as well, creating the next generation of sustainable luxury for customers, driving industry change and championing our communities.

JOB PURPOSE

As the Senior Manager, IT Internal Audit at Burberry, you’ll be responsible for designing, overseeing and delivering all IT assurance and data analytics to support the Internal Audit plan. You will provide strategic oversight and detailed specialist knowledge for technology-related assurance work globally,   ensuring data-driven insights contribute to audit objectives, risk identification, operational efficiencies, and overall risk management.

This Senior Manager, IT Internal Audit role is offered on a full time, permanent basis and is based in our Horseferry House, London office for a minimum of 3 days per week.

RESPONSIBILITIES

• Align IT audit plans with business strategy and assess their impact on overall audit priorities
• Lead and present audit findings, risks, and recommendations to senior stakeholders, emphasising business relevance
• Build and maintain strong relationships across IT and business functions to position Internal Audit as a strategic partner
• Act as the senior IT audit lead, engaging with the CIO and IT leadership on audit strategy, execution, and thought leadership
• Drive the development and integration of data analytics within audits; oversee the use of dashboards and visualisation tools
• Plan and deliver IT audits and programme assurance for major tech initiatives, assessing risk, controls, and process design
• Contribute to investigations, special projects, and process improvement efforts in collaboration with Internal Audit leadership
• Stay current on emerging technologies, cyber risks, AI, and audit trends to inform audit approach and recommendations
• Partner with the CISO to evaluate cyber security maturity and provide insights to executive leadership
• Apply and promote best practices using frameworks such as NIST, ISO, SOC2, CIS, GDPR, and PIPL

PERSONAL PROFILE

• Financial Qualification (ACA, CIMA, ACCA) and/or Technical Qualification (CISA, CISSP, CISM)
• Experience in internal/external audit and/or an industry role specialising in technology/finance
• Detailed knowledge of auditing ERP systems, IT infrastructure, Information Security and IT management
• Programme Assurance experience, particularly of large multi-year projects involving IT implementation
• Proficiency in analytics visualization tools, to draw meaningful insights and present findings
• Ability to lead end-to-end audits with minimal supervision, ensuring effective execution and impact
• Strong communicator, adept at delivering complex messages, effectively influencing stakeholders across all levels, and presenting to senior stakeholders
• Collaborative team player, with a deep understanding of group dynamics and a cooperative approach to achieving shared objectives
• Commitment to high-quality work, demonstrating self-motivation and a drive to add value through insightful analysis and recommendations
• Excellent verbal and written communication skills, ensuring clarity and professionalism in all interactions

Desired

• Retail industry experience, with a strong understanding of sector-specific risks, operations, and business processes
• Experience of SAP ERP, including data extraction and analysis to support audit and assurance activities

Function: Audit, Risk and Assurance 

Reports to: Head of Technology Audit

Job Grade: PT1

Location: Colt House, London, UK (hybrid set up)

Role purpose

The Technology Lead Internal Auditor is primarily responsible for leading and/or participating in technology and security focused audits with support over technology control elements of financial and operational audit assignments. They will be responsible for evaluating the adequacy of Colt’s (Colt Core and DCS) overall control environment in both design and application, highlighting inefficiencies in processes and supporting the business in building a sustainable control environment. The Technology Lead Internal Auditor will also be responsible for assisting on ad-hoc special projects and completing audit projects in any of Colt’s locations. This role is a great opportunity to add value and develop expertise across technology, security, and transformation processes across multiple business units.

Key accountabilities

• Deliver and/or lead technology and security audit assignments across Colt locations in a timely and efficient manner, participating in all stages of the audit from planning, execution, reporting and follow-up
• Fully understand and communicate the impact of audit findings (including root causes and risks) to relevant key stakeholders. As technology and security can be complex, being able to communicate complex technical issues and ideas in simple terms is highly valued.
• Make value add recommendations to the business to improve controls, processes and overall governance
• Engage with stakeholders to obtain a comprehensive understanding of the business under review and the implications for audit
• Build trust and credibility with technology stakeholders throughout the audit process
• Maintain audit documentation in accordance with Colt audit methodology
• Provide coaching to junior staff members (e.g. graduates/apprentices) on audit methodology and practices, where applicable

Role specific requirements

Skills & Experience

• Experienced technology auditor (e.g. CISA, CISSP, ISO or CIMA qualification preferred but not essential)
• Some experience in using or planning data analytic based audits. Ability to analyse data and identify trends, think critically and solve problems using a high degree of intellectual curiosity and good judgement
• Over 3 years’ experience working in a technology and/or cyber security audit related role either as an internal auditor or in related auditing/assurance fields
• Good experience of controls on risk and assurance assignments, including greenfield audits
• Strong knowledge of audit techniques for technology and security (business and operational control and risk management, a bonus).
• Ability to operate in a flat organisational structure with direct exposure to senior management and Executives
• Strong communication skills, proactiveness, and competence to influence outcomes
• Work effectively with team members and the wider business to build partnerships.