Deputy Head of Internal Audit (IT Specialist)

The Deputy Head of Internal Audit (IT Specialist) will spearhead the planning, development, and implementation of all University’s IT Audit and Data Analytics strategies. This role is pivotal in moving the Internal Audit Service forward through ensuring that it can adapt its processes to meet the demand of the University as the use of technology and AI increases. The Deputy Head of Internal Audit (IT Specialist) will lead not only the IT Audit Strategy but will also be responsible for ensuring wider audit coverage in non-IT audits through increased use of data analytics as well as identifying areas for continuous auditing.

The role holder will be responsible for the overall management and delivery of the University’s IT Audit Strategy as well as increasing the use of data analytics across the whole of the IT Audit Plan. They will also be responsible for evaluating the service’s use of technology and incorporating generative AI where possible into audit techniques to improve efficiency of audits, increase audit coverage and keep pace with the rapidly changing digital environment at the University.

This role ensures that digital infrastructure, data management, and cybersecurity practices align with sector regulations, institutional policies, and strategic objectives.

In order to achieve this the role holder will be expected to:

• Develop and own the University IT Audit Universe, identifying the key areas of risk and assurance in the digital sphere at the University.
• Define and develop the University’s approach to IT Audits, including the development of programmes that predict vulnerabilities that may occur and provide relevant and timely recommendations to address any weaknesses identified.
• Work with senior stakeholders to identify key digital developments across the University and assess how internal audit can best be used to provide assurance over their risk and control environments.
• Develop the Internal Audit Service’s use of data analytics including identifying how and where they can best be used to optomise outcomes for management. This will include training of non-IT auditors within the team to develop audit capability and resilience.
• Report findings of IT related audits to senior management, UEB and the Audit & Risk Committee to ensure that issues can be surfaced and addressed in a timely manner.
• Identify opportunities for upskilling the existing Internal Audit team in terms of IT Audit to increase coverage and resilience in this area.

This post is full-time and open-ended.

Salary: £61,759 - £67,468 per annum (Grade 8). This may be increased up to £74,458 per annum for exceptional candidates.

Closing date: Sunday, 16 November 2025

Cardiff University is committed to supporting and promoting equality and diversity and to creating an inclusive working environment. We believe this can be achieved through attracting, developing, and retaining a diverse range of staff from many different backgrounds. We therefore welcome applicants from all sections of the community regardless of sex, ethnicity, disability, sexual orientation, trans identity, relationship status, religion or belief, caring responsibilities, or age. In supporting our employees to achieve a balance between their work and their personal lives, we will also consider proposals for flexible working or job share arrangements.

Applications may be submitted in Welsh, and an application submitted in Welsh will not be treated less favourably than an application submitted in English.

Advert information