Internal Auditor – Digital & Technology Full Time

Euston, Norfolk
Wellcome

Salary: £58,040

Closing date: Wednesday, 24 January 2024

Contract type: Permanent

The Wellcome Trust is a global charitable foundation. We improve health for everyone by funding science, leading policy and advocacy campaigns, and building partnerships.

We plan to spend £16bn over the next ten years, funding new discoveries in life, health, and wellbeing, and taking on three global health challenges: mental health, infectious disease and climate and health.

These challenges need the bold science we support, but they won’t be solved by science alone.

We are looking for an Internal Audit, Digital & Technology to join our team.

Where in Wellcome will I be working?

You will be working in the Internal Audit team, reporting to the Internal Audit Senior Manager.

Internal audit assists the Audit and Risk Committee and Executive management to protect the assets, reputation and sustainability of the organisation. The team comprises of 11 team members, assisted by two co-source consulting firms. They perform audits relating to all of Wellcome’s activities (e.g. funded institutions, Investments, Strategy, D&T, Finance, Wellcome Collection) as well as Wellcome’s subsidiaries (Genome Research Limited, Premier Marinas, Urban & Civic and Leap) and partner institutions.

The Technology and Data Internal Audit Team at Wellcome provides a unique opportunity for the right candidate to deliver audits in a broad range of activities. This includes audits of IT controls across change, access and development processes, Investments services technology (e.g. Bloomberg/JP Morgan), enterprise-wide platforms (e.g. cloud technology) and service solutions (e.g. workday), third party management, openstack data centre environments, data warehousing and analytics and information security.

What will I be doing?

The Digital & Technology internal auditor conducts risk based audits covering Wellcome, subsidiaries and funded institutions. Reviews will cover various technology risk areas such as cloud, data, cyber security, Identity management and IT General controls.

As an Internal Audit, Digital & Technology, you will :

• Execute end to end audits Wellcome’s business activity, mainly in relation to IT, as determined by the Annual Audit Plan within agreed timescales and to a suitable level of quality as well as identifying and evaluate key risks in IT and develop recommendations for IT controls and practices. Draft clear and concise audit findings.

• Undertake assignments in a high-quality manner performing detailed planning, fieldwork, deriving preliminary audit findings and holding audit close discussions with senior management.

• Monitor and report on management’s progress in implementing internal audit recommendations using agreed dashboards / reporting mechanisms.

• Developing relationships with key stakeholders, providing guidance, challenge, and corrective action, without preventing growth or commercial performance.

• Contribute to a diverse and inclusive culture across the organisation, collaborating across departments.

Is this job for me?

This is a highly valued role within the organisation and offers the potential candidate an opportunity to enhance their skills in a modern technology environment. You will have the opportunity to lead IT audits at various funded institutions, and subsidiaries. You be part of a high performing and experienced Digital and Technology audit team at Wellcome with expertise in cloud, cyber, networks, programme management and IT General controls.

We are looking for someone who :

• Has experience working in internal audit, either in industry or in practice, with a focus on delivering IT audits.

• Has an understanding and experience delivering IT audits in some of the following areas: IT controls across change, access and development process aligned to the standards expected from Sarbanes-Oxley legislation; Investments services technology (e.g. Bloomberg/JP Morgan); Enterprise-wide platform as a service cloud technology; Enterprise level software as a service solution (e.g. workday); Third party management; Openstack data centre environments; Data warehousing; Information security

• Has experience with data driven auditing, and data analytics and visualisation tools

• Has a CISA/CRISC/CISM/CISSP or other relevant industry qualification and post-qualification experience in practice or managing in-house/co-sourced technology audits.

For the recruitment of this role we are using Workday’s anonymised application functionality.

To apply please upload your CV and complete our short application. Please ensure that when you are applying you complete all sections on the application form, we will not be able to accept any applications that are incomplete.

Interview dates: 1st stage (MS Teams / Online) – 8, 9 and 12 of February; 2nd stage (Face to Face) – 20 and 21 of February

You can view the full j ob description on our website

You can read more about the benefits we offer our employees on our website

Our Hybrid Way of Working

We understand that our colleagues have commitments and personal interests outside of work and we strive to build a flexible working environment, in which people can perform at their best. We are currently working 2 days per week (Tuesdays and Wednesdays) from our Euston Road offices (as part of our hybrid Ways of Working) with the remaining 3 days from home.

Diversity and Inclusion is at the heart of everything we do

Diversity and Inclusion is a priority at Wellcome . We are committed to cultivating a fair and inclusive environment, where everyone can be themselves and thrive. We are happy to discuss flexible working options for all roles. We work to ensure that our recruitment processes are as inclusive as possible to everyone. This includes making adjustments for people who have a disability or long-term condition. Please visit our website for more information on adjustments and accessibility, or contact us at .

Upon a conditional offer being made, the successful applicant for this position will be required to undertake a Basic Disclosure and Barring Service (or equivalent) criminal record check to disclose any ‘unspent‘ criminal convictions or conditional cautions under the Rehabilitation of Offenders Act 1974. The criminal record check with not show anything that is ‘spent‘.

For further guidance on disclosure of criminal records please see this UK Government Guidance . You can view our Policy Statement on the Recruitment of Ex-offenders here . You can view our Privacy Statement here .