Vice President, Issue Validation Manager – Technology Audit

Overview

In this role you will lead end-to-end validation of audit and self-identified issue closures across EMEA Technology (TEC). You ensure remediation is complete, effective and sustainable, acting as an independent quality gate for closure against IA, 2LOD and regulatory standards. You will engage engineering and audit teams to keep work on track and mitigate risk, shaping durable controls and clear closure artefacts. This is a chance to impact risk governance in a leading global financial group.

Pay / Benefits

• flexible working

Responsibilities

• Own the independent validation process for technology audit and risk issues, confirming remediation is complete and residual risk is acceptable.
• Define and maintain issue validation standards, templates and evidence checklists aligned to IA methodology, 2LOD requirements and relevant regulations (e.g., DORA, SOX).
• Perform detailed evidence reviews (design and operating effectiveness) including sampling, re-performance and walkthroughs; document outcomes in working papers.
• Partner with control owners to agree closure criteria upfront; challenge action plans to ensure root causes are addressed and controls are embedded sustainably.
• Track remediation progress on key issues and identify risks to effective closure.
• Support and QA closure packs for IA review and regulatory interactions with concise status reporting.
• Champion a strong risk & control culture across TEC; coach product and engineering teams on remediation and durable control design.

Key requirements

• Risk Management / Internal Audit / External Audit within a highly regulated international organisation
• Technology Risk Management, Cyber Security, SOX and other regulations
• Deep understanding of IT general controls and application controls; familiarity with COBIT, NIST, CRI and ISO 27001
• Experience in 1LOD technology risk & controls, Internal Audit, or 2LOD oversight within financial services
• Hands-on experience validating remediation and control effectiveness, including sampling and documentation standards
• Knowledge of regulatory requirements relevant to technology (e.g., DORA, SOX 404, EBA/ECB ICT expectations) and audit standards
• Excellent communication and influencing skills with the ability to challenge senior stakeholders
• Strong written skills for concise closure rationales and audit-ready documentation
• Self-motivated, organised and delivery-focused; able to manage multiple high-severity issues to tight deadlines
• Analytical, detail-oriented, data-literate and collaborative
• Experience with internal and/or external audit is beneficial

• Excellent communication and influencing skills
• Collaborative and inclusive mindset
• Strategic thinking and ability to distill complex topics for non-technical audiences
• IT general controls and application controls
• Familiarity with COBIT, NIST, CRI, ISO 27001
• Regulatory knowledge for DORA, SOX 404, EBA/ECB ICT expectations

…