Technology Audit Manager

In this role you will lead end-to-end IT and cyber audits within ScottishPower's Internal Audit function, delivering independent assurance to senior stakeholders. You will shape the audit approach, manage complex reviews, and influence governance and control improvements across technology domains. The position sits at the heart of risk management for technology and supports the broader Iberdrola Group and Net Zero commitments. You will work in a collaborative, cross-functional environment and influence action to strengthen the control environment.

• competitive salary and bonus
• car allowance
• private medical
• pension scheme with 10% company match
• 36 days annual leave
• Cycle to Work scheme

• Lead end-to-end IT and cyber audits from planning to reporting, engaging senior management for clearance
• Ensure audits meet timescales and are fully documented per quality procedures
• Maintain high audit standards suitable for senior recipients
• Influence management groups to enhance governance, risk management and controls
• Perform proactive risk assessments and focus on high-risk areas with key stakeholders
• Advise the business on strengthening the control environment
• Form opinions on management processes and controls with robust recommendations
• Monitor management actions and escalate unresolved items to the Head of Internal Audit
• Contribute to the annual technology audit plan and the Iberdrola/ScottishPower requirements
• Develop and deliver an innovation plan for audit methodology, data use, and efficiency

• Degree-level education
• Extensive technology/cyber Internal Audit experience in a large enterprise
• Professional technology-related Internal Audit qualification (e.g., CISA, CISM)
• Strong communication and influencing abilities to challenge senior management
• Understanding of risk management, internal control and governance with integrity
• Self-starter with ability to prioritise, deliver quality on time
• Ability to present concise findings to senior management and influence actions
• Coaching, teamwork, collaboration and partnering skills
• Awareness of governance and cybersecurity frameworks; COBIT 2019, NIST CSF 2.0, NCSC CAF beneficial
• Experience of auditing AI implementations, multi-year technology change programmes, and data analytics beneficial

• strong communication
• influence with senior stakeholders
• collaboration and teamwork
• COBIT 2019
• NIST CSF 2.0
• NCSC CAF