IT Audit Manager

About the company

S4Capital is a new age/new era digital advertising and marketing services company, listed on the London Stock Exchange. Founded in 2018, S4Capital has combined with more than 25 companies across the content, data & digital media and technology services sectors. In 2024, S4Capital further simplified its structure around two practices, Marketing services and Technology services, with a new brand name, Monks. The company is headquartered in London and is active in 32 countries with over 7,000 employees.

In 2022 S4Capital’s Internal Audit function was created using an outsource model in partnership with Deloitte. With the recent appointment of a Head of Internal Audit we are now looking to bring the function in house and create a best-in-class internal audit team to help drive business value through the next stage of our growth. This IT Audit Manager position will be one of the first roles to be recruited and the successful candidate will be actively involved in shaping the new function. This is an incredibly exciting opportunity to join a business of scale which is continuing to disrupt the advertising and marketing world and has a mission to ‘seize the decade’. 

As a collaborative people-based business we would like the team to be in the office 2-3 days per week. Some international travel will be needed, approximately 20%.

About the job

The key responsibilities of the IT Audit Manager include:

• In conjunction with the Head of Internal Audit, designing and implementing an internal audit methodology aligned to Institute of Internal Audit (IIA) Standards.
• Contributing to the development of the annual internal audit plan.
• Managing the delivery of assigned audits to time, cost and quality. Taking ownership of audit delivery from planning through fieldwork to reporting and obtaining buy-in from key stakeholders.
• Reviewing the completion and quality of audit work performed by other team members to ensure that that controls have been appropriately tested and conclusions reached are supported. 
• Using your expertise to draft high quality audit reports that clearly articulate the issues identified and their impact on the business, along with SMART actions to address them.
• Working with action owners and other relevant stakeholders to track the completion of all agreed actions, escalating any overdue actions as appropriate. 
• Taking an active role in the recruitment and onboarding of new team members as the function takes shape.
• Once recruited, managing 1-2 direct reports in a small matrixed team. Developing talent, motivating, leading, and supporting team members to ensure skills, knowledge and professional experience are effectively shared and utilised.
• Building and maintaining an effective stakeholder network across the organisation.  
• Contributing to a collaborative and professional work environment that encourages learning, innovation, and career development.
• Fostering awareness of risk and control across S4Capital – encouraging a business culture that seeks continuous improvement in the management of risks and effectiveness of controls.
• Maintaining an up-to-date knowledge of IT audit best practice and regulatory requirements.
• Ad hoc projects as and when required.

About the ideal candidate

• An agile and robust mindset, able to work effectively in a world with rapidly changing priorities and deadlines. Experience in a fast growth (organic and M&A) organisation would be very beneficial.
• Possess a professional qualification - IT Audit (CISA) or IT Security (CISM, CISSP) qualifications.
• Technical expertise and knowledge of professional internal audit practices, governance, risk management and internal controls, with a strong track record of relevant audit experience.
• Strong written and verbal communication skills with a demonstrable ability to summarise and explain technical issues and solutions for a non-technical audience.
• Experience of direct line management with a successful track record of motivating, leading, coaching, developing and performance-managing individuals or small teams.
• Has advanced understanding of IT general controls (e.g. security, change management, disaster recovery, backup, data centre, infrastructure, etc.), including proper design and implementation.
• Possess strong core IT audit skills and understand up-to-date IT auditing methodologies and concepts.
• Ability to build up an understanding of the Group’s IT at pace as a basis for supporting an effective IT risk management process.
• Familiarity with AI tools and frameworks to govern their usage would be desirable.