Internal Audit Manager IT Risk and CASS
FNZ is a global wealth management platform provider.
About FNZ
FNZ describes itself as 'wealth's growth platform', providing a global, end-to-end wealth management platform that integrates modern technology, business operations, and investment operations within a regulated financial institution connected to a universe of investment products. The company serves banks, wealth managers, insurance companies, and asset managers, with over US$2.5 trillion in assets on platform and nearly 30 million end investors served through its clients. Its offerings span wealth management platforms, advisor tools and productivity solutions, asset management distribution, and trade and post-trade securities services, along with a data platform combining an Operational Data Store, Analytical Data Warehouse, and Aggregated Data Warehouse to power analytics, machine learning, and generative AI insights. FNZ has notable clients including Santander, Colonial First State (CFS), Vanguard, Aviva, and Swedbank, and in 2025 announced a global five-year strategic partnership with Microsoft to integrate Azure AI Foundry, Microsoft Fabric, GitHub Copilot, and Microsoft 365 Copilot across its platform and operations. FNZ is backed by major institutional shareholders including Caisse de dépôt et placement du Québec (CDPQ), CPP Investments, Generation Investment Management, and Motive Partners.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will develop risk-based audit plans and deliver independent audits across business processes and technology domains. You will assess controls, conduct fieldwork, document findings, prepare reports for senior governance bodies, validate corrective actions, supervise auditors, advise stakeholders, and provide assurance over CASS and technology risks.
Requirements
- Strong knowledge of FCA CASS rules including CASS 6 7 8 and 10
- Ability to apply UK CASS requirements across securities and custody models
- Hands-on experience with ICMR ECMR custody reconciliations and segregation calculations
- Experience auditing CASS controls and assessing design and operating effectiveness
- Ability to deliver risk-based CASS audit coverage
- Experience with CASS governance MI and breach escalation
- Experience in UK-regulated financial services
- Strong understanding of IT General Controls
- Experience auditing cloud-based platforms
- Knowledge of cybersecurity frameworks such as NIST and ISO 27001
- Experience developing and delivering financial services audit plans
- Experience coaching and developing junior staff
- Experience in asset management is advantageous
- Experience in a fintech environment is advantageous
- Understanding of data analytics
- Knowledge of relevant local financial services legislation
- Strong persuasive oral and written communication
- Bachelor's degree in cyber information technology computer science or a related field
- Master's degree or MBA is advantageous
- ACCA CIMA CA CISA CISM CISSP or CIA certification is desirable
- Knowledge of cybersecurity information security cloud computing network infrastructure application development SDLC data management governance and IT risk frameworks
Responsibilities
- Apply internal auditing standards and industry best practices
- Assess business and technology risks and controls
- Challenge management to improve governance risk management and internal controls
- Develop and implement risk-based audit plans
- Maintain the audit universe and risk assessments
- Plan and execute business and technology audits
- Conduct audit testing and supervise fieldwork
- Document audit results according to IIA standards
- Prepare audit reports for executive management the Audit Committee and the Board
- Track and validate audit findings and corrective actions
- Build relationships with business Risk Compliance and Technology stakeholders
- Represent Internal Audit at governance committees
- Contribute to year-end financial audits
Benefits
- Flexible and agile working arrangements
