Principal Internal Auditor - IT & Change

The role of Internal Audit at Paragon is to provide an independent, objective assurance and consulting activity designed to add value and improve Paragon’s operations. It helps the business accomplish its objectives by bringing a systemic and disciplined approach to evaluate and improve the effectiveness of risk management, control, and governance processes. Internal Audit is the third line of defence for ensuring there is effective control in the Paragon Group and Paragon Bank regulatory and risk management framework. Internal Audit have specific responsibilities to provide assurance that IT activities are appropriately undertaken.

• Lead IT and audits relating to Identity Access Management, Infrastructure, Disaster Recovery and other relevant areas across the Bank to ensure the Group adheres to security policies, frameworks, and relevant regulations.
• Carry out IT audit work across all business areas to assess information security risk exposure.
• Assist the Audit Manager in identifying and prioritising significant risk areas in the Group’s first line business activities, and second line risk management and regulatory framework as part of the preparation for the audit plan coverage.
• Responsible for delivery of own audits within agreed timescales
• Provide mentoring to team colleagues, sharing knowledge and offering guidance, direction, and assistance as required
• Arrange and attend meetings with auditees ahead of reviews to discuss/agree the internal audit approach and scope
• Review working practices/procedures with relevant staff/management
• Identify current / potential risks and assess controls against those risks for each audit area
• Originate / develop and carry out audit tests, discuss audit findings with local and senior management; complete peer review of audit files as directed by Audit Manager
• Issue and discuss audit findings with Audit Manager & IA Director before discussion with senior management to agree factual accuracy and recommendations/actions
• Produce high quality internal audit reports for review by the Audit Manager
• Follow up to evidence that actions agreed in Internal Audit reports have been implemented, or to assess progress made towards achieving the action agreed to date
• As requested by Internal Audit Director/Audit Manager, attend working groups, committees, meetings as appropriate and advise on control aspects of developing systems / new business areas / acquisitions
• Undertake any investigation work or ad hoc projects as directed by the Internal Audit Director/Audit Manager
• Carry out due diligence work for acquisitions/servicing contracts as requested by the Internal Audit Director/Audit Manager
• Represent Paragon at external functions as agreed with the Internal Audit Director/ Audit Manager

• Displays good knowledge and understanding of IT landscapes, systems, environments that may be supplemented through awareness of ISO standards, ITIL framework, NIST, COBIT, ITGCs
• Demonstrates awareness and understanding of the regulatory requirements and expectations relevant to role
• Ability to identify and assess risks and challenge processes and procedures in a constructive and effective manner and offer recommendations to negate/minimise the risks
• Ability to analyse and critically evaluate data
• Demonstrate effective challenging, listening, fact finding and recording skills
• Ability to communicate effectively and confidently both in writing and verbally at all levels, challenging management, exercising diplomacy when appropriate
• Produce factually accurate draft audit reports
• Determine resources, and plan work logically to complete a task effectively
• Use interactive skills to have an impact and be effective at meetings
• Develop and maintain good working relationships with business areas
• Demonstrate a pro-active, self-motivated, and professional approach with a commitment to learn new skills and grasp concepts quickly, such as the ability to learn and interpret appropriate practices, policies, and regulatory requirements
• Ability to work on own initiative and as part of a team
• Observe confidentiality at all times
• Working knowledge and ability to navigate Paragon’s operational systems and databases and competent with Microsoft Office applications
• Maintain essential records and report on the progress of projects effectively
• Demonstrate knowledge and understanding of Paragon’s businesses and third-party service contracts
• Working knowledge of the appropriate regulation in relation to Paragon’s businesses
• Demonstrate awareness of emerging issues in the financial services sector and relevant legislation/regulation
• Demonstrate the ability to mentor colleagues, sharing knowledge and experience, coaching less experienced auditors demonstrate

• Relevant degree e.g., Computing, Mathematics, Engineering or Computer Science
• Internal Audit experience is desirable but not essential
• IT qualifications including PRINCE2, ISACA are desirable but not essential

We promote flexibility around how and where we work so that you can achieve a healthier work-life balance. Emerging from the pandemic, most of our teams are moving towards hybrid working, which offers an even better balance of office and home working. Of course, for us to provide the best service to our customers and remain successful, individual business areas will adopt different approaches to how flexibility is implemented locally.