Internal Audit Manager – IT Risk & CASS

Role Description 

Overall responsibility for the IA service with a focus on business and technology risks from the generation of a risk based annual plan through to delivering independent internal audits across the FNZ Group and conducting continuous monitoring and advisory activities.

Specific Role Responsibilities  

• Ensuring that internal auditing standards and requirements are fully understood and applied;

• Employing industry best practice;

• Assessing whether all significant business and technology risks are identified and appropriately reported by management and the Risk function to the Board and Executive Management;

• Assessing whether business and technology risks are adequately controlled;

• Challenging Executive Management to improve the effectiveness of governance, risk management and internal controls;

• Working with senior management to identify and mitigate or minimise strategic, operational, financial and compliance risks to FNZ; and

• Developing, socialising and implementing a flexible, risk-based audit plan based on the FNZ’s risk universe, and other concerns identified by management and the Audit Committee.

Functional Area Responsibilities 

• Maintaining the Audit Universe and associated risk assessment from ongoing continuous monitoring activities;

• Delivering the Audit plan by planning, executing and reporting audits covering both business processes and technology domains (e.g. ITGCs, cloud environments, system implementations, data governance, cybersecurity, and change management);

Specifically, the Internal Audit Manager will be expected to take an active part in executing fieldwork by conducting testing and, eventually, supervising the activities performed by both internal staff and the third-party internal auditors performing the fieldwork;

• Working with stakeholders to help define the business and technology internal audit plans;

• Being actively involved in planning, executing, and delivering the audit plan approved by the Audit committee. Fieldwork execution will sometimes include coordinating and, eventually, supervising the activities performed by both internal staff and the third-party internal auditors performing the fieldwork;

• Documenting the results of audit work in accordance with audit department and the Institute of Internal Auditors (IIA) standards.

• Preparing timely audit reports for executive management, the Audit Committee and the Board of Directors;

• Enforcing the internal audit findings and recommendations, especially where corrective action is required (issue validation including issue tracker management);

• Building strong relationships with business, Risk, Compliance and Technology stakeholders (Engineering, Infrastructure, Cyber Security, IT Operations);

• Performing ad-hoc internal-audit related projects as required;

• Attending and representing Internal Audit at relevant Governance committees or working groups; and

• Contributing, as appropriate, in the year-end financial audit with the external auditor.

Experience required 

Primary CASS requirements:

Core Technical & Regulatory Expertise

• Strong knowledge of FCA CASS rules (CASS 6, 7, 8 and 10), including client money, custody, CMAR reporting, and application within a Large CASS firm context.

• Ability to interpret and apply UK CASS requirements across different models (e.g. Securities vs Custody), aligned to FCA expectations under CASS and SYSC.

CASS Operations & Process Expertise

• Hands-on experience with key processes (ICMR/ECMR, custody reconciliations, segregation calculations).

• Understanding of how technology, systems and data flows support CASS processes, including risks in complex operating and client-servicing models.

Internal Audit & Assurance Capability

Proven experience auditing CASS controls, including assessing design and operating effectiveness and identifying weaknesses, breaks and potential breaches.

Ability to deliver risk-based CASS audit coverage, including effective challenge of 1st and 2nd line and alignment to regulatory expectations.

Governance & Regulatory Engagement

• Experience with CASS governance, MI and breach escalation, with effective engagement across SMFs, Risk/Compliance, CASS Oversight and external stakeholders (incl. FCA/auditors).

• Strong understanding of Internal Audit’s role in providing independent assurance to the Board over client asset protection.

Regulatory Environment

• Experience in UK regulated financial services, applying CASS requirements in large, complex environments, including service provision to CASS-regulated clients.

• Understanding of heightened FCA expectations for robust, independent CASS assurance beyond the external audit.

Core Technology & IT Risk Expertise:

• Strong understanding of IT General Controls (ITGCs) including access management, change management, incident management, and IT operations;
• Experience auditing cloud-based platforms;

• Knowledge of cybersecurity frameworks (e.g. NIST, ISO 27001) and their application in financial services environments.

Primary general audit requirements:

• An experienced leader;

• Highly motivated and with a proven track record of strong influencing skills and the ability to liaise and work with senior management;

• Good understanding and working knowledge of current internal audit practices & techniques through significant years of progressive work experience within a financial services environment;

• Proven experience of developing and delivering audit plan within the financial services sector; and

• Experience of coaching and developing junior staff.

Secondary requirements:

• Experience with asset management sector;

• Experience within a fast-paced fintech environment;

• Good understanding of data analytics.

Skills and knowledge:

• Good understanding of relevant local legislative framework for the financial services sector; and

• A strong, confident persuasive communicator (oral and written), capable of robust dialogue.

Qualifications:

·        Education: A bachelor’s degree in cyber / information technology, Computer Science or a related field. A master's degree or MBA is an additional advantage.

·        Certifications:  Association of Chartered Certified Accountants, (ACCA), Chartered Institute of Management Accountants (CIMA), Chartered Accountant (CA),  Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), or Certified Information Systems Security Professional (CISSP) are highly desirable. Certified Internal Auditor (CIA) is an additional advantage.

·        Technical expertise: Deep knowledge of and experience with IT systems and processes, including:

o   Cybersecurity and information security

o   Cloud computing platforms (e.g., AWS, Azure, Google Cloud)

o   Network infrastructure

o   Application development and SDLC (Agile methodologies)

o   Data management and governance

o   IT risk management frameworks (e.g., NIST, ISO)

About FNZ Culture  

Our culture is what drives us. It's at the heart of who we are and everything we do. It's what inspires, excites and moves us forward. Our ambition is to create a culture for growth, one that opens up limitless opportunities for our employees, customers and the wider world. At FNZ we know that great impact is only possible with great teamwork.  

That’s why we value the strength and diversity of thought in our global team.  

The FNZ Way is the cornerstone of what we do. It is comprised of four values that set the standard for how everyone at FNZ interacts with each other, with our customers, and with all our diverse stakeholders around the world. 

1.      Customer obsessed for the long-term 

2.      Think big and make an impact  

3.      Act now and own it all the way 

4.      Challenge, commit and win together 

Read more about The FNZ Way and our values: www.fnz.com/culture 

Opportunities 

• Right from day one, you will work alongside exceptional, multicultural teams - experts in their respective fields - who will inspire and challenge you to make your greatest impact;  

• Be part of a highly successful, rapidly growing, global business that is leading the delivery of financial services via cloud computing and partners with some of the world’s largest companies; 

• Working in a flexible and agile way that meets the needs of the business and personal circumstances;  

• Remuneration, significant financial rewards and career advancement is based on individual contribution and business impact rather than tenure or seniority; and

• We provide global career opportunities for our best employees at any of our offices in the UK, EU, US, Canada, South Africa and APAC. 

Commitment to Equal Opportunities  

At FNZ, we recognise that diversity, equity and inclusion are important factors contributing to our success. We embrace the unique perspective and capabilities of our current and future employees, which will help us continue to drive innovation and achieve our business goals. Recruitment decisions at FNZ are made in a non-discriminatory manner without regard to gender, ethnicity/race, faith, age, nationality, gender identity, sexual orientation, marital status, socio-economic background, disability or military veteran status where all applicants and employees are valued and respected.  

In addition, we want to ensure accessibility needs are well supported, if you require specific support please advise us. 

About FNZ

FNZ is committed to opening up wealth so that everyone, everywhere can invest in their future on their terms. We know the foundation to do that already exists in the wealth management industry, but complexity holds firms back. 

We created wealth’s growth platform to help. We provide a global, end-to-end wealth management platform that integrates modern technology with business and investment operations. All in a regulated financial institution. 

We partner with the world’s leading financial institutions, with over US$2.5 trillion in assets on platform (AoP).

Together with our clients, we empower nearly 30 million people across all wealth segments to invest in their future.