Technology Audit Manager

Apply for the Technology Audit Manager role at BBC. Job Details Job Band: E Contract Type: Permanent, Full-time In-house Title: Audit Manager Department: Audit & Assurance, Quality Risk and Assurance, BBC Chief Operating Group Location: London or Birmingham (Hybrid working, minimum two days per week in office) Proposed Salary Range: £70,000 - £85,000 (plus £5,441pa if London based) Flexible working: Discussed at offer stage Purpose of the Role Join our high‑performing Audit and Assurance team at the heart of the BBC. We deliver impactful audits that shape the organisation and focus on the BBC’s most significant risks. Highly regarded across the Group, our work drives strategic decisions and supports continuous improvement. If you’re passionate about making a difference, influencing change, and working where your insights matter, this is your opportunity to be part of a team that truly makes an impact. Why Join the Team Do you want to join a team where your work truly makes a difference? At the BBC, our Audit and Assurance team thrives on a great team culture, where collaboration, support, and innovation are at the core. No two days are the same as we tackle the BBC’s biggest risks and help shape its future. It’s a fantastic place to work – diverse, dynamic, and driven by purpose – within a world‑renowned organisation that values integrity, impact, and continuous improvement. Your Key Responsibilities and Impact Take a primary role in the timely delivery of a portfolio of audit assignments, using a team of internal Senior Auditors and co‑source internal audit providers; take ownership from planning through fieldwork to reporting and obtain buy‑in from key stakeholders. Conduct audits across a wide range of technology domains including products, cybersecurity, cloud computing, data privacy, IT governance, infrastructure, and application controls. Negotiate with and influence senior management in the development of appropriate controls responses. Provide expert advice and challenge to senior technology and business stakeholders on IT risk, control, and compliance matters; stay abreast of emerging technologies, digital transformation initiatives, and evolving cyber threats to inform audit planning and execution. Contribute to the development and continuous improvement of audit methodologies, tools, and data analytics capabilities; promote a culture of innovation, integrity, and continuous improvement within the audit function, to identify opportunities to digitise and streamline audit processes. Maintain knowledge of the BBC strategy, external and organisational risk environment and business changes to help inform audit approach and activity. Your Skills and Experience Essential Criteria Full qualification in at least one of the following professional bodies, with a preference for Chartered Accountancy qualifications: Qualified Accountant through a recognised professional body (e.g. CA, ACA, ACCA, ACMA) Chartered Member of the Institute of Internal Auditors (UK) Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP) or equivalent. Proven experience in leading and delivering complex technology audits in a large, multifaceted organisation, and demonstrable ability to influence and collaborate with senior technology leaders and stakeholders. Strong understanding of IT risk management, cybersecurity frameworks (e.g. NIST, CAF, ISO 27001), and regulatory compliance (e.g. GDPR, SOX, EU AI Act). Experience leading or contributing to digital transformation initiatives within internal audit, including design and implementation of innovative audit techniques, agile auditing, and use of emerging technologies to enhance assurance delivery. Ability to negotiate and work alongside a range of contacts including senior management and the motivation and energy to actively promote control improvements. Desired But Not Required Additional experience in one or more of the following areas is a significant advantage: Cybersecurity and information security audits Cloud and infrastructure audits Data analytics and automation in audit Agile and DevOps environments Digital transformation and emerging technologies IT risk and control frameworks (e.g. COBIT, ITIL) Data Analytics Internal Consulting IT Audit Project Audit Media‑related industry experience We’d love to hear from you and encourage you to apply if you can bring some of these skills and experiences, together with transferable strengths. Background Before your start date, you may need to disclose any unspent convictions or police charges, in line with our Contracts of Employment policy. Failure to disclose may result in the withdrawal of your offer. BPS25 Disclaimer This job description is a written statement of the essential characteristics of the job, with its principal accountabilities, incorporating a note of the skills, knowledge and experience required for a satisfactory level of performance. This is not intended to be a complete, detailed account of all aspects of the duties involved. Please note: If you are offered this role, the BBC will conduct employment screening checks which include reference checks, eligibility to work checks, and, if applicable, safeguarding and adverse media/social media checks. Any offer made is conditional on these checks being satisfactory. For any general queries, please contact: bbchr@bbc.co.uk Redeployment The BBC is committed to redeploying employees seeking suitable alternative employment within the BBC and will give priority consideration to those employees seeking redeployment, ahead of other applicants. Priority consideration means that for those employees the application will be considered alongside anyone else at risk of redundancy, prior to any individuals not at risk. #J-18808-Ljbffr