Group IT Audit Manager

Closing Date: 28-Aug-25Why this job matters:BT's purpose is to 'connect for good' and its ambition is to become 'the most trusted connector of people, devices and machines'.  To achieve this, it's important we are clear where we are on track and where we need to focus.  Our Group Internal Audit team shines a light on what works well and where things can be improved, helping BT build solid foundations so it can go faster in delivering and achieving its purpose and ambition. As an Internal Audit Manager you will play a key role in providing high quality assurance to the Board Audit and Risk Committee.  You will support the delivery of audits across IT, Networks, and data in a professional manner to enable Group Internal Audit to provide independent and objective assurance to senior management and the Board, via the Board Audit & Risk Committee. This includes the tracking and testing of management actions to address audit findings to confirm resolution. You will also engage stakeholders throughout the audit process in a customer-connected manner to provide high quality, reliable, efficient service and experience.Key Responsibilities:Delivering end-to-end audits, working individually or as part of a team alongside other Internal Audit Managers.  Ensuring all audits are delivered in a risk assessed, timely, and focused manner, utilising data analytics tools where appropriate.Initial oversight and first level review of audit work papers prepared by individuals assigned to audit where acting as lead to ensure the work is of good quality;Preparation of initial draft audit reports;Tracking agreed audit actions to ensure implementation is achieved against targets and that the remediation is effective;Supporting the IA SM in ongoing liaison with CFU/CU management; this includes gathering business insights to provide input to Group Internal Audit's annual strategy of a programme of objective audit work;Supporting on input to the various management fora across the CFUs such as production of papers for quarterly ARCs and other governance committees; attendance at assigned sessions with management;Contributing to initiatives underpinning the RCA goals and objectives;May line manage apprentices and graduates;Providing technical advice, coaching and mentoring to audit team members and direct reports where appropriate; sharing timely, insightful feedback to improve performance.Skills:Communication skills (verbal and written).   The ability to communicate in a way that is appropriate to the situation, understandable to audience and demonstrating a constructive, assured and non-confrontational manner.Curiosity.  An ongoing desire to know, investigate or learn something to drive continuous development and improvement.Simplify.  The ability to cut through complexity to provide insight and practical recommendations for change.Project management: strong time management skills with the ability to effectively anticipate, plan, and prioritise commitments, delivering to agreed timescales;Business knowledge: strong grasp of risk and control; insight of specified business risks, goals, strategy and operations;Self-starter.  Ability to organise and prioritise time to deliver outcomes to agreed timescalesRelationship building.  Successful experience of developing strong relationships quickly to work in a collaborative manner across multiple teams, with diverse skills and experience, to deliver at pace.Integrity and Honesty. Doing the right thing and a willingness to speak up, challenge and hold to account.Experience:Minimum of four years' experience of leading or delivering IT internal and/or external audit engagements within a complex business;Able to demonstrate ongoing CPD;Ideally to have experience of working with 1st or 2nd line of defence teams on enterprise risk management.Minimum 4 years experience of leading or delivering IT internal and/or external audit engagements within a complex business (Big 4 experience preferred).Industry experience leading internal audits.Good knowledge of industry standard technology control frameworks and benchmarks (e.g. ISF SoGP, CIS Benchmarks, NIST, ISO 27001)Excellent written and verbal communication skills with the ability to explain complex concepts to a variety of stakeholdersStrong project management skills with the ability to effectively anticipate, plan and prioritise commitmentsAble to demonstrate ongoing CPD;Experience of working with 1st or 2nd line of defence teams on enterprise risk management.Experience in one or more of the following areas: Cloud computing, Fixed and mobile networking, Technology infrastructure (Linux/Unix, Windows, fixed and mobile networking), Database security, Application security, Information Security, Operational Resilience, Third Party Management, GDPR, Data governance, analytics and AIProfessional Qualifications: CISA Certification or other relevant qualification – Preferred.Eligibility Criteria"Please note that as per the IJP guidelines for India, if you have an active PIP/Disciplinary sanctions then you cannot apply for a role internally for the duration of that sanction. In circumstances when you are in a disciplinary process but the outcome hasn't been reached or there is an active appeal then you can apply, however, the Offer could be withdrawn if, subsequently, you're issued with a sanction or your appeal is unsuccessful.It is the responsibility of an applicant to not apply to IJP in case if they are on an active PIP/ Disciplinary case/ Warnings or sanction. If such an applicant is found to have applied for a role, then, strong disciplinary action will be taken against that applicant." Our leadership standards Looking in:Leading inclusively and SafelyI inspire and build trust through self-awareness, honesty and integrity.Owning outcomesI take the right decisions that benefit the broader organisation.Looking out:Delivering for the customerI execute brilliantly on clear priorities that add value to our customers and the wider business.Commercially savvyI demonstrate strong commercial focus, bringing an external perspective to decision-making.Looking to the future:Growth mindsetI experiment and identify opportunities for growth for both myself and the organisation.Building for the futureI build diverse future-ready teams where all individuals can be at their best. The skills you'll need Auditing Documentation & Records Management Communication Business Assurance Audit Strategy Audit Advisory Business Insights Strategic Planning Data Analysis Data Management Business Partnering & Consulting Requirements Management Technical Reporting Business Process Improvement Project/Programme Management Talent Management Decision Making Growth Mindset Performance Management Inclusive LeadershipAbout usBT Group was the world's first telco and our heritage in the sector is unrivalled.  As home to several of the UK's most recognised and cherished brands – BT, EE, Openreach and Plusnet, we have always played a critical role in creating the future, and we have reached an inflection point in the transformation of our business. Over the next two years, we will complete the UK's largest and most successful digital infrastructure project – connecting more than 25 million premises to full fibre broadband.  Together with our heavy investment in 5G, we play a central role in revolutionising how people connect with each other. While we are through the most capital-intensive phase of our fibre investment, meaning we can reward our shareholders for their commitment and patience, we are absolutely focused on how we organise ourselves in the best way to serve our customers in the years to come.  This includes radical simplification of systems, structures, and processes on a huge scale. Together with our application of AI and technology, we are on a path to creating the UK's best telco, reimagining the customer experience and relationship with one of this country's biggest infrastructure companies.  Change on the scale we will all experience in the coming years is unprecedented.  BT Group is committed to being the driving force behind improving connectivity for millions and there has never been a more exciting time to join a company and leadership team with the skills, experience, creativity, and passion to take this company into a new era.A FEW POINTS TO NOTE:Although these roles are listed as full-time, if you're a job share partnership, work reduced hours, or any other way of working flexibly, please still get in touch.We will also offer reasonable adjustments for the selection process if required, so please do not hesitate to inform us.DON'T MEET EVERY SINGLE REQUIREMENT?Studies have shown that women and people who are disabled, LGBTQ+, neurodiverse or from ethnic minority backgrounds are less likely to apply for jobs unless they meet every single qualification and criteria. We're committed to building a diverse, inclusive, and authentic workplace where everyone can be their best, so if you're excited about this role but your past experience doesn't align perfectly with every requirement on the Job Description, please apply anyway - you may just be the right candidate for this or other roles in our wider team.