Description
Help us turn audit findings into lasting improvements! You'll lead external audit engagement across Group Engineering at LSEG. The role also covers regulatory responses, issues and risk reporting. Bring these services together through safe use of artificial intelligence (AI) across Governance, Risk and Compliance.
Reporting to the Head of Technology & Cyber GRC, you'll set priorities and lead managers, specialists and analysts. This is a first-line role, working with management to address risk. Independent assurance remains with the audit and assurance teams.
Responsibilities:
- Lead external audit engagement. Manage the relationship with external auditors and bring Finance, control owners and application teams together. Coordinate planning, scope discussions, readiness, evidence requests, walkthroughs and support for testing. Review observations and management responses. Resolve evidence gaps, resolve disagreements and supervise remediation through to closure.
- Be responsible for internal audit and regulatory responses. Prioritise Engineering's response to internal audits, regulatory examinations and enquiries, and relevant client or contractual assessments. Check evidence and responses, agree owners and track commitments. Keep leaders advised of concerns and decisions needed.
- Challenge issues and remediation. Review self-identified issues and audit or regulatory findings. Question root causes, proposed actions and closure evidence. Confirm that remediation reduces the underlying risk, rather than just completing an action plan. Identify repeat weaknesses and resolve delays. Coordinate risk acceptances through agreed approval routes.
- Make risk information useful. Maintain a consistent Technology and Cyber risk profile and clear risk and control indicators. Use source-system signals to flag emerging risks and breaches of agreed risk limits. Guide risk committees and provide concise Board and executive reporting. Explain what has changed, why it matters and what leaders need to decide.
- Improve delivery through AI. Lead the team that builds and maintains AI agents for GRC evidence gathering, analysis and reporting. Choose use cases and work with engineers or delivery partners. Keep agent logic and change knowledge in-house. Assign owners and set limits on agent access and actions. Test output quality and require human approval for material conclusions. Manage logging, changes, incidents and retirement.
- Develop people and services. Recruit and mentor colleagues across audit, risk, data and AI governance. Set clear expectations, invite different views and help people build new skills. Measure service quality, reduce rework and focus effort on the highest risks.
Requirements:
- External audit experience is essential. You're looking for someone who has led external audit engagements from planning to closure. Your examples show direct responsibility for evidence quality, findings and management responses.
- You understand Technology and Cyber controls and the evidence auditors and regulators expect. You can assess risk appetite and interpret risk and control indicators.
- You've managed audit, regulatory or remediation portfolios in regulated environments. You challenge weak root causes and check that corrective action reduces risk.
- You've built or improved a risk, audit or GRC capability and developed teams with different specialisms.
- You can weigh evidence, provide direction and explain technical or regulatory issues to senior leaders. You build constructive relationships while challenging conclusions when needed.
- You understand AI risks and controls well enough to oversee agent development and maintenance. You can question engineers on data access, testing, reliability and human oversight.