Attestations and Client Audit Manager D&A (DORA)

About the Role

This is a high-impact leadership role within the Data & Analytics (D&A) assurance function. As the Attestations and Client Audit Manager, you will lead the delivery of key D&A DORA client audit and attestation programmes. You will lead complex client assurance engagements, including DORA client audits and ISAE 3000 attestations, working directly with clients, external auditors and senior partners across Technology, Product, Risk, Information Security, Legal and Compliance. Beyond delivering audits and attestations, you will drive audit readiness, strengthen controls, oversee remediation and continuously improve how assurance is delivered across D&A.

Key Responsibilities

Leadership & Team Management

• Lead, coach and develop a team of assurance professionals based in India, creating a high-performing and collaborative culture focused on quality, accountability and continuous improvement.
• Set clear priorities and objectives, oversee delivery and support team development through coaching, feedback and career development.
• Drive automation, standardisation and continuous improvement to enhance the quality, efficiency and scalability of assurance delivery.

Client Audit & Attestation Management

• Own the end-to-end development and delivery of ISAE 3000 attestations, including scoping, control and evidence coordination, management review and engagement with the external assessor through to final issuance.
• Lead the DORA client audit programme, coordinating planning, stakeholder engagement, evidence collection, client responses and remediation activities.
• Act as a senior point of contact for clients, account teams and external auditors throughout assurance engagements.
• Coordinate collaborators and domain experts to deliver accurate, timely and well-evidenced responses, identifying recurring themes and opportunities to improve audit readiness.

Risk, Controls & Governance

• Drive DORA client audit readiness across Data & Analytics, partnering with Product, Engineering, Technology, Risk and other control functions to strengthen controls, evidence and supporting documentation.
• Maintain oversight of key assurance documentation, including control narratives, process flows, risk and control matrices and supporting evidence.
• Track audit observations and remediation actions, working with accountable partners to support timely and sustainable resolution.
• Represent the Attestations and Client Audit function at relevant working groups and governance forums, providing assurance updates, highlighting emerging risks and themes, and driving actions and decisions where required.
• Apply risk-based judgement to assurance matters, bringing up material risks or control gaps appropriately.
• Produce clear assurance metrics and reporting, providing collaborators with visibility of audit activity, remediation and emerging themes.

Client & Stakeholder Engagement

• Build trusted relationships with clients, external auditors and various collaborators.
• Partner with Legal, Compliance, Information Security, Technology, Product and customer-facing teams to address evolving client, contractual and regulatory assurance requirements.
• Lead complex discussions, constructively challenge where appropriate and translate technical, risk and regulatory matters into clear, actionable insights.

Requirements & Tech Stack

Experience

• Significant experience within Risk Assurance, Technology Audit, IT Risk, Information Security, Controls or Internal Audit, ideally within financial services, technology, consulting or another regulated environment.
• Demonstrable experience leading, coaching and developing teams.
• Experience managing complex client audits, external assurance reviews or attestation programmes from planning through to completion.
• Experience engaging directly with external auditors, financial institutions or other sophisticated clients.
• Practical understanding of DORA, technology risk and control requirements.
• Solid understanding of relevant assurance standards and frameworks such as ISAE 3000/3402, SOC 1/SOC 2, ISO 27001, NIST, COBIT or equivalent.
• Experience working across complex technology environments and geographically distributed teams, including driving remediation and sustainable control improvements.

Skills & Leadership

• Strong people leadership, coaching and team development capabilities.
• Excellent stakeholder management, influencing and negotiation skills.
• Solid understanding of technology risk, information security and control principles.
• Excellent analytical, critical-thinking and problem-solving skills.
• Strong written and verbal communication skills, with the confidence to engage directly with clients, auditors and senior partners.
• Ability to translate complex technical, risk and regulatory matters into clear, actionable business insights.
• Ability to handle challenging priorities, exercise good judgement and work effectively with a high degree of autonomy.

Qualifications

• Desirable: Professional qualification such as CISA, CRISC, CISM, CISSP, CIA or equivalent.
• Desirable: Degree or equivalent professional experience in Information Security, Technology, Risk, Audit, Business or a related field.
• Desirable: Experience supporting DORA, FCA, SEC, ESMA or other regulatory or client assurance reviews.
• Desirable: Experience across Operational Resilience, Technology Risk, Control Assurance or Technology Governance.