Exchange for Change
IT Audit Manager
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
About Us
At Exchange for Change, we are building something the UK has never had before. Working across England, Scotland and Northern Ireland, we are designing and delivering a Deposit Return Scheme from the ground up, creating a system that helps reduce litter and waste by encouraging people to return their empty drinks bottles and cans for recycling.
We are industry led, and driven by purpose. A national movement with a clear mission. No bottle unreturned. No can left behind.
This is not just another job. This is a rare opportunity to do meaningful work, shape a landmark national programme, and help deliver lasting positive impact for people, businesses and the planet alike.
Your Role
The IT Audit Manager will lead and deliver independent assurance over EfC’s IT systems, digital platforms, infrastructure, security posture and resilience. You will oversee the planning and execution of IT audit activity, ensuring technology and data risks are well understood and effectively managed. You will use strong analytical skills, digital tools and data insights to enhance assurance, support IT risk awareness, oversee follow-up actions, and maintain up-to-date knowledge of emerging technology, cyber and data risks.
You will be part of the Internal Audit & Risk team and work closely with Digital, Data and Technology (DDaT).
You’ll be based at our Milton Keynes office (30min from Euston) with the option to work from home 2 days per week.
Key Responsibilities & Priorities
IT General Controls (ITGC)
- Lead reviews of access management, privileged access and authentication controls.
- Oversee assessments of change management processes across digital and technology environments.
- Evaluate IT operations controls including backups, monitoring and incident management.
Cyber & Information Security
- Assess cyber security controls against recognised frameworks (e.g. ISO 27001, Cyber Essentials).
- Review vulnerability management, patching and endpoint/network security.
- Evaluate data protection controls including encryption, secure configuration and monitoring.
Business Continuity & Disaster Recovery
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
- Review business continuity and disaster recovery plans for design and operational readiness.
- Assess backup integrity, recovery testing and resilience of critical systems and data.
- Evaluate crisis management arrangements and alignment with EfC risk appetite.
Audit Delivery, Stakeholder Management & Continuous Improvement
- Lead the planning and delivery of IT audits, using digital tools and data analytics to enhance assurance.
- Provide assurance to the Audit, Finance and Risk Committee (ARC) on the effectiveness of IT governance, risk management and internal controls.
- Produce clear, concise audit findings and recommendations for senior stakeholders and the ARC.
- Build strong, influential relationships with Digital, Data and Technology teams to support constructive challenge.
- Oversee tracking and validation of follow-up actions to ensure risks are mitigated effectively and sustainably.
- Provide independent advisory and risk-focused guidance on large-scale IT Transformation Programmes, supporting effective delivery, governance, resilience, and business outcomes.
What Success Looks Like
- Clear, strategic insight into technology, data and cyber risks that strengthens EfC decision-making.
- A maturing and resilient control environment across IT governance, risk management, ITGC, cyber security and digital platforms.
- Audit recommendations that drive timely, meaningful improvements supported by strong evidence.
About You
You will bring strong leadership in IT audit, good judgement and the ability to communicate confidently with senior stakeholders. You will have 6+ years of experience in IT audit, ideally gained in professional practice (though not essential), or within an internal audit, risk or technology assurance function. You will hold or be working towards a relevant qualification such as CISA, CISSP, CRISC, ISO 27001 Lead Auditor, or equivalent.
You will have experience working with digital platforms, cloud environments, modern technology stacks and data governance. You are comfortable using data analytics to support audit testing and confident assessing risks across digital transformation, automation, integration and emerging technologies. You are analytical, curious and proactive, committed to your own development and to strengthening IT and data risk awareness across EfC.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
The Opportunity
Work that makes a difference - and a place where you can too.
Benefits
This is a once-in-a-generation opportunity to help establish a scheme of national importance, working with purpose-driven colleagues and partners to deliver visible, real-world impact. You’ll contribute directly to meaningful environmental and social change and in return, we support and reward our team through a range of benefits and initiatives, including:
- Competitive base salary
- Bonus scheme
- 34 days holiday inclusive of bank holidays, additional holidays for length of service
- Flexibility with holidays. You may work on a local public holiday and take an alternative day off, giving you the freedom to celebrate the days that matter most to you.
- 5% employer pension contribution
- Life Insurance: Cover of 4 times base salary
- Private Medical Insurance: Includes GP access and an Employee Assistance Programme (EAP) for wellbeing support
- Income protection
- Family Leave: Maternity, adoption, parental, and paternity leave policies will be developed to be progressive and inclusive.
- Hybrid Working: 60% office or field-based and 40% home-based, with some flexibility according to business and personal needs.
We’re building one of the UK’s most ambitious environmental programmes.
Exchange for Change is delivering the Deposit Return Scheme across England, Scotland and Northern Ireland, helping to reduce litter, increase recycling and support a circular economy. Every bottle and can returned is a step towards a cleaner future.
We’re a team of passionate people who care about making a difference. We work collaboratively, value new ideas and support each other to do great work.
If you’re looking for a role where you can grow your career while helping to create lasting environmental impact, you’ll fit right in.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills