IT Audit Specialist

Location:

London or Newcastle offices. Our new ways of working will include a mix of time at your assigned office, time at client sites across the UK as required and working from home. We have a minimum requirement of attending in person for 2 days a week at NAO or client offices.

Salary: c.£61,000 p.a. (Newcastle) - £67,000 p.a. (London) plus Civil Service Pension. A higher base salary may be available for an exceptional candidate.

• Nationals of Commonwealth countries who have the right to work in the UK
• Nationals from the EU, EEA or Switzerland with (or eligible for) status under the European Union Settlement Scheme (EUSS)

Please note, we are not able to sponsor work visas. Please contact us at  should you have any questions on your nationality eligibility.

Please do not wait until the Final date to receive applications as the hiring team with be conducting ongoing interviews up to the. Final stage interviews will take place WC 9 March 2026.

The NAO supports parliament to hold government to account and to improve public services. We focus on driving long-term sustainable improvement in public service delivery and work with government and our stakeholders to deliver better performance. In a nutshell, we help the nation spend wisely.

The clients of the NAO are investing in IT systems to address the challenges they face in fulfilling their role. This includes investing in new finance systems and related support systems. These investments mean that, increasingly, the NAO’s financial audits are relying on automated controls / IT dependent manual controls and supporting IT general controls, necessitating increased requirements for IT Audit to support the NAO’s audits of financial statements.

The IT Audit specialist will be joining an IT audit team which is made up of seven IT Audit Specialists, four IT Audit Managers and four Apprentices to deliver work across more than 50 different clients covering all areas of the NAO’s financial audit client base.

The team is led by an IT Audit Director and four IT Senior Audit Managers.

We require an experienced IT Audit Specialist capable of supporting financial audit teams and IT Audit Managers to scope, plan and perform the hands‑on delivery of all end to end IT audit work required for a client, including testing General IT Controls and related automated controls.

We also require the candidate to be involved in other internal aspects of our IT audit practice work, including the development of practice material e.g. work programmes, guidance material etc. Given the likely engagements on which they will work, it would be helpful for the candidate to have experience in some or all of the following areas:

SAP finance systems (including S/4 HANA);

Oracle finance systems (including Fusion);

Active Directory; and System migrations.

Given that there are a range of tasks that the candidate could be asked to work on, the candidate must have the skills and experience to be able to move from a client focussed IT audit testing role to an internal material development role.

As the candidate will be producing client facing and internal facing written material, they must have strong report writing skills.

The preferred candidate is likely to be an experienced Senior Consultant or equivalent, with experience of IT audit work, close to promotion to a managerial role, and is capable of working independently and taking ownership of the day to day delivery of all end to end audit work.

Key responsibilities will be supporting the IT Senior Audit Managers and IT Audit Managers in the scoping, planning and delivery of the annual programme of IT audit work. Depending on the level of experience of the candidate, some management of specific IT audit engagements may be required.

Delivery of specific IT audit engagements

Use your technical knowledge and understanding of the NAO’s financial audit methodology to:

Guide FA teams in responding to IT related risks to their audit; and support the production of an appropriately detailed IT audit response to address the risks identified for relevant technology layers;
Po…