Job Title:  IT Audit Manager

Job Number:  22091

Country: Romania
Function: Finance
Level: Experienced Professional
Appointment Type: Permanent


Purpose Statement

To undertake and lead less complex IT audits (infrastructure, cyber and application) within the group (or its suppliers) and report findings of internal audits using structured tools and techniques to support the audit process. To provide audit expertise, advice and guidance and promotes an awareness of IT risk management and control practices with BAT management.


Key Accountabilities

  • Participate in or lead IT internal audits in order to form an independent and objective view on risk management practices and the internal control environment by:
    • Identifying significant IT risks in processes, projects, services and business applications. 
    • Performing appropriate audit tests over the IT controls identified for testing.
    • Assessing the design, effectiveness and efficiency of internal controls over IT risks.
    • Management Action Plans for control issues fully address the root cause of the issues.  Writing reports for Management and Audit Committees that clearly and accurately explain the audit findings, their cause and impact on the defined business process objectives. 
    • Agreeing action plans with management to bring about the necessary improvements in the processes.
    • Providing recommendations to improve the quality of the overall risk management and internal control practices.
    • Ensuring all audit work is fully documented within the Audit Management System in line with IIA Standards and the BAT Business Audit Methodology.
  • Provide data analytics through the use of automated analytics tools.
  • To assist in delivering a best practice audit and business risk service.
  • Promote an awareness of risk management and control practices with BAT management.
  • Coordinate or participate in the delivery of IT training to Internal Audit staff to support the global delivery of audit services.
  • Assisting in the delivery of a best practice audit and business risk service with a focus on IT.
  • Line management responsibility for Senior Auditors and Audit Project Team management responsibility for individual assignments. This includes timely and clear feedback on their performance and development needs.


Knowledge, Skills and Experience

  • Degree educated with relevant professional qualification. 
  • Relevant experience of security and IT risk management principles including NIST, ISO, ITIL and COBIT.
  • Experience in cloud computing (including data management) concepts, technologies and risk mitigation practices.
  • Experience with significant accounting firm and/or corporate industry experience, including SOX.
  • Experience in SAP Basis and articulating SAP system exceptions into non-technical business relevant impact scenarios.
  • Relevant qualification of either CISA, CRISC, CISM or CISSP.
  • Significant experience with accounting firm and/or corporate industry experience.
  • Experience dealing with external auditors, statutory and regulatory bodies.
  • Experience in a global FMCG or similar dynamic operating environment and a good understanding of the tobacco business.
  • Experience of one or more of BAT’s core business functions, including operations, marketing, finance and IT.
  • Good knowledge of internal audit practices, principles and procedures and corporate governance requirements for a group operating globally.


British American Tobacco is one of the world’s leading multinational companies, with brands sold in over 200 markets, made in 44 factories in 42 countries.

We are proud that we are consistently among the top 5 companies on the London Stock Exchange.

Our portfolio includes our world-famous Global Drive Brands – Dunhill, Kent, Lucky Strike, Pall Mall and Rothmans – along with many other leading international brands, such as Vogue, Peter Stuyvesant and State Express 555.

Alongside our traditional tobacco business, we are also developing products that offer consumers potentially less risky alternatives to regular cigarettes. Our Next Generation Products are already leading the way in the Industry of vapour and tobacco heating devices. We continue to develop a solid portfolio of consumer solutions which already include well known global brands like Vype, glo and Voke.

Contractual Legal Entity: BAT (Holdings) Ltd (GB70)

Job Segment: Audit, ERP, Law, Risk Management, Marketing Manager, Finance, Technology, Legal, Marketing