About us

At Exchange for Change, we are building something the UK has never had before. Working across England, Scotland and Northern Ireland, we are designing and delivering a Deposit Return Scheme from the ground up, creating a system that helps reduce litter and waste by encouraging people to return their empty drinks bottles and cans for recycling.

We are industry led, and driven by purpose. A national movement with a clear mission. No bottle unreturned. No can left behind.

This is not just another job. This is a rare opportunity to do meaningful work, shape a landmark national programme, and help deliver lasting positive impact for people, businesses and the planet alike.

Your role

The IT Audit Manager will lead and deliver independent assurance over EfC’s IT systems, digital platforms, infrastructure, security posture and resilience. You will oversee the planning and execution of IT audit activity, ensuring technology and data risks are well understood and effectively managed. You will use strong analytical skills, digital tools and data insights to enhance assurance, support IT risk awareness, oversee follow‑up actions, and maintain up‑to‑date knowledge of emerging technology, cyber and data risks.

You will be part of the Internal Audit & Risk team and work closely with Digital, Data and Technology (DDaT).

You’ll be based at our Milton Keynes office (30min from Euston) with the option to work from home 2 days per week.

Key Responsibilities & Priorities

IT General Controls (ITGC)

• Lead reviews of access management, privileged access and authentication controls.

• Oversee assessments of change management processes across digital and technology environments.

• Evaluate IT operations controls including backups, monitoring and incident management.

Cyber & Information Security

• Assess cyber security controls against recognised frameworks (e.g. ISO 27001, Cyber Essentials).

• Review vulnerability management, patching and endpoint/network security.

• Evaluate data protection controls including encryption, secure configuration and monitoring.

Business Continuity & Disaster Recovery

• Review business continuity and disaster recovery plans for design and operational readiness.

• Assess backup integrity, recovery testing and resilience of critical systems and data.

• Evaluate crisis management arrangements and alignment with EfC risk appetite.

Audit Delivery, Stakeholder Management & Continuous Improvement

• Lead the planning and delivery of IT audits, using digital tools and data analytics to enhance assurance.

• Provide assurance to the Audit, Finance and Risk Committee (ARC) on the effectiveness of IT governance, risk management and internal controls.

• Produce clear, concise audit findings and recommendations for senior stakeholders and the ARC.

• Build strong, influential relationships with Digital, Data and Technology teams to support constructive challenge.

• Oversee tracking and validation of follow‑up actions to ensure risks are mitigated effectively and sustainably.

• Provide independent advisory and risk-focused guidance on large-scale IT Transformation Programmes, supporting effective delivery, governance, resilience, and business outcomes.

What success looks like

• Clear, strategic insight into technology, data and cyber risks that strengthens EfC decision‑making.

About you

You will bring strong leadership in IT audit, good judgement and the ability to communicate confidently with senior stakeholders. You will have 6+ years of experience in IT audit, ideally gained in professional practice (though not essential), or within an internal audit, risk or technology assurance function. You will hold or be working towards a relevant qualification such as CISA, CISSP, CRISC, ISO 27001 Lead Auditor, or equivalent.

You will have experience working with digital platforms, cloud environments, modern technology stacks and data governance. You are comfortable using data analytics to support audit testing and confident assessing risks across digital transformation, automation, integration and emerging technologies. You are analytical, curious and proactive, committed to your own development and to strengthening IT and data risk awareness across EfC.

The opportunity

Work that makes a difference - and a place where you can too.

This is a once-in-a-generation opportunity to help establish a scheme of national importance, working with purpose-driven colleagues and partners to deliver visible, real-world impact. You’ll contribute directly to meaningful environmental and social change and in return, we support and reward our team through a range of benefits and initiatives, including:

• Competitive base salary

• Bonus scheme

• 34 days holiday inclusive of bank holidays, additional holidays for length of service

• Flexibility with holidays. You may work on a local public holiday and take an alternative day off, giving you the freedom to celebrate the days that matter most to you.

• 5% employer pension contribution

• Life Insurance: Cover of 4 times base salary

• Private Medical Insurance: Includes GP access and an Employee Assistance Programme (EAP) for wellbeing support

• Income protection

• Family Leave: Maternity, adoption, parental, and paternity leave policies will be developed to be progressive and inclusive.

• Hybrid Working: 60% office or field-based and 40% home-based, with some flexibility according to business and personal needs.