IT Auditors in the United Kingdom

36 auditors found

Compare 36 IT audit firms in the United Kingdom. From specialist IT audit firms to large accounting and certification organisations in London, Warrington, Ely, Glasgow, Manchester and more.

Amethyst Risk Management

Amethyst Risk Management

London11-50 employees

Amethyst Risk Management is an NCSC assured provider delivering cyber security audit and review services. They specialise in assessing organisations against the NCSC Cyber Assessment Framework for government and critical infrastructure sectors.

NCSC Cyber Assessment Framework (CAF)Cybersecurity AuditsIT Risk Assessments
View auditor
Brand Compliance

Brand Compliance

Antwerpen11-50 employees

RvA-geaccrediteerde certificatie-instelling met kantoor in Antwerpen, gespecialiseerd in ISO- en NEN-certificeringen. Erkend door het CCB voor CyberFundamentals-verificatie en ISO 27001-certificering onder NIS2.

ISO 27001 CertificeringISO 27701 (Privacy)ISO 9001 (Kwaliteit)ISO 22301 (Business Continuity)+5
View auditor
Centre for Assessment

Centre for Assessment

Warrington11-50 employees

Centre for Assessment is a UK-based certification and assurance body providing SOC 2 assurance reports and ISAE 3000 certification. They offer accessible and proportionate assurance services for organisations of all sizes.

SOC 2 (Type I & II)ISAE 3000
View auditor
Complyport

Complyport

London11-50 employees

Complyport is a specialist compliance and IT audit firm focused on FCA and PRA regulated financial services firms. They deliver IT and cybersecurity audits, IT audit plans, and cyber risk assessments tailored to the regulatory requirements of the UK financial sector.

Cybersecurity AuditsIT Risk AssessmentsFCA/PRA Operational ResilienceIT Internal Audit (uitbesteed)
View auditor
Consilium Labs

Consilium Labs

London11-50 employees

Consilium Labs is a global specialist IT audit firm providing SOC 1/2/3, ISAE 3402, ISAE 3000, ISO 27001 and CSA STAR audits. They focus on cloud security assurance and help technology organisations demonstrate trust to their customers.

SOC 1 (Type I & II)SOC 2 (Type I & II)SOC 3ISAE 3402 (Type I & II)+3
View auditor
ITGRC Advisory

ITGRC Advisory

London11-50 employees

ITGRC Advisory (known as The SOC 2) is a UK-based specialist firm focused on SOC and ISAE assurance engagements. They provide SOC 1, SOC 2, SOC 2+, SOC 3, ISAE 3402 and ISAE 3000 audits and attestation services for technology and service organisations.

SOC 1 (Type I & II)SOC 2 (Type I & II)SOC 3ISAE 3402 (Type I & II)+1
View auditor
Securance

Securance

Utrecht11-50 employees

Gespecialiseerd IT-audit- en cybersecuritybedrijf dat meer dan 800 organisaties bedient met een Single Audit, Multiple Standards aanpak. Combineert SOC, ISAE 3402, ISO 27001, NIS2 en DORA in één gestroomlijnd auditproces.

SOC 1 (Type I & II)SOC 2 (Type I & II)ISAE 3402 (Type I & II)ISAE 3000+7
View auditor
Bridewell

Bridewell

London51-200 employees

Bridewell is a leading UK cyber security firm holding the most NCSC assured service categories of any provider. They deliver NCSC assured Audit & Review, Risk Assessment, Risk Management, CAF assessments and GovAssure services for government and critical national infrastructure.

NCSC Cyber Assessment Framework (CAF)GovAssureCybersecurity AuditsIT Risk Assessments+1
View auditor
GRC Solutions

GRC Solutions

Ely51-200 employees

GRC Solutions (formerly IT Governance Ltd) is a leading UK-based IT governance, risk and compliance provider. As an NCSC Assured consultancy, they offer IT audit, SOC 2 preparation, ISO 27001 audit, cyber security audit and review services.

SOC 2 (Type I & II)ISO 27001 CertificeringCybersecurity AuditsNCSC Cyber Assessment Framework (CAF)+2
View auditor
Henderson Loggie

Henderson Loggie

Glasgow51-200 employees

Henderson Loggie is a leading Scottish accountancy firm offering specialist IT audit services including ISAE 3402 Type I & II reporting, IT internal audit, cybersecurity and digital resilience assessments, and UK GDPR compliance audits. With deep expertise in the Scottish market, they provide comprehensive assurance services to organisations across the UK.

ISAE 3402 (Type I & II)Cybersecurity AuditsUK GDPR / Data Protection AuditIT Internal Audit (uitbesteed)
View auditor
Prescient Security

Prescient Security

London51-200 employees

Prescient Security is a global IT audit and compliance firm with senior auditors across EMEA. They deliver SOC 1, SOC 2, SOC 3, ISO 27001, PCI DSS, HITRUST, and FedRAMP audits, and hold CREST accreditation for penetration testing services.

SOC 1 (Type I & II)SOC 2 (Type I & II)SOC 3ISO 27001 Certificering+3
View auditor
A-LIGN

A-LIGN

London201-500 employees

A-LIGN is a compliance and security audit firm with a London office, specialising in SOC 2, ISO 27001, HITRUST, PCI DSS and FedRAMP audits. They serve technology companies seeking streamlined compliance across multiple frameworks.

SOC 2 (Type I & II)ISO 27001 CertificeringPCI DSS AuditsHITRUST CSF Certificering
View auditor
Baker Tilly UK

Baker Tilly UK

London201-500 employees

Baker Tilly UK provides IT advisory and IT audit support for financial audit engagements, along with assurance reporting services.

Cybersecurity AuditsIT Risk AssessmentsSOX / ITGC
View auditor
Coalfire

Coalfire

London201-500 employees

Coalfire is a global cybersecurity advisory and audit firm with European offices serving UK clients. They provide SOC 1/2/3, ISAE 3402, ISO 27001, PCI DSS, FedRAMP and HITRUST audits, with deep expertise in cloud security assurance.

SOC 1 (Type I & II)SOC 2 (Type I & II)SOC 3ISAE 3402 (Type I & II)+3
View auditor
Crowe UK

Crowe UK

London201-500 employees

Crowe UK provides IT audit, technology risk, SOC 1/2 reporting, IT internal audit and ITGC testing services. Part of the global Crowe network, their UK practice combines international methodology with local expertise for effective IT assurance engagements.

ISAE 3402 (Type I & II)SOC 1 (Type I & II)SOC 2 (Type I & II)SOX / ITGC+2
View auditor
MHA

MHA

London201-500 employees

MHA (formerly MacIntyre Hudson) provides IT audit and technology risk assurance services, including AIM audit services. Their team helps mid-market organisations manage technology risks and meet regulatory requirements.

Cybersecurity AuditsIT Risk AssessmentsSOX / ITGC
View auditor
Moore Kingston Smith

Moore Kingston Smith

London201-500 employees

Moore Kingston Smith offers SOC reporting and IT audit services with a focus on technology companies. Their dedicated technology sector team understands the specific assurance needs of SaaS, fintech and digital businesses.

SOC 1 (Type I & II)SOC 2 (Type I & II)Cybersecurity Audits
View auditor
PKF Littlejohn

PKF Littlejohn

London201-500 employees

PKF Littlejohn provides IT audit as part of statutory and financial audit engagements, with particular strength in technology assurance for AIM-listed companies.

Cybersecurity AuditsIT Risk AssessmentsSOX / ITGC
View auditor
Protiviti UK

Protiviti UK

London201-500 employees

Protiviti UK offers internal IT audit, technology risk consulting, SOX ITGC testing and co-sourced/outsourced IT audit services. Their team provides flexible IT audit solutions for organisations seeking to strengthen their technology risk management.

SOX / ITGCCybersecurity AuditsIT Risk AssessmentsThird-Party / Vendor Risk Audits+1
View auditor
Saffery

Saffery

London201-500 employees

Saffery provides risk assurance services including technology risk assessments. Their team supports clients across private wealth, charities and owner-managed businesses with practical risk management solutions.

IT Risk AssessmentsCybersecurity Audits
View auditor
Schellman

Schellman

London201-500 employees

Schellman is a global IT audit and compliance firm serving UK clients with SOC 1/2, ISO 27001, PCI DSS, HITRUST, FedRAMP and SOX ITGC testing services. Known for their deep technical expertise and efficient audit processes.

SOC 1 (Type I & II)SOC 2 (Type I & II)ISO 27001 CertificeringPCI DSS Audits+2
View auditor
BDO UK

BDO UK

London500+ employees

BDO UK provides IT audit, assurance and certification services including SOX 404, ISAE 3402, SOC 2, PCI DSS and data privacy audits. Their dedicated technology risk team serves financial services, technology and public sector clients across the UK.

ISAE 3402 (Type I & II)SOC 2 (Type I & II)SOX / ITGCPCI DSS Audits+4
View auditor
BSI Group

BSI Group

London500+ employees

BSI Group is a UK-headquartered global certification body providing ISO 27001, ISO 22301, ISO 20000, ISO 9001 and Cyber Essentials certification audits. As one of the world's leading standards organisations, BSI offers comprehensive management system certification.

ISO 27001 CertificeringISO 22301 (Business Continuity)ISO 20000 (IT Service Management)ISO 9001 (Kwaliteit)+1
View auditor
Bureau Veritas UK

Bureau Veritas UK

London500+ employees

Bureau Veritas UK provides ISO 27001 certification, cybersecurity audits and SOC 2 audit services. Part of the global Bureau Veritas group, they deliver testing, inspection and certification services across information security and cyber resilience domains.

ISO 27001 CertificeringCybersecurity AuditsSOC 2 (Type I & II)
View auditor
Deloitte UK

Deloitte UK

London500+ employees

Deloitte UK delivers IT audit and assurance, third party assurance (ISAE 3402, SOC 1/2/3), and controls assurance services. With one of the largest technology risk practices in the UK, Deloitte supports organisations in managing complex IT risk and compliance requirements.

ISAE 3402 (Type I & II)SOC 1 (Type I & II)SOC 2 (Type I & II)SOC 3+5
View auditor
DNV UK

DNV UK

London500+ employees

DNV UK provides ISO 27001 certification, IT audit and information security assessments. As one of the world's largest certification bodies, DNV offers independent assessment and certification services for organisations seeking internationally recognised standards.

ISO 27001 CertificeringCybersecurity AuditsISO 22301 (Business Continuity)ISO 9001 (Kwaliteit)
View auditor
EY UK

EY UK

London500+ employees

EY UK provides technology risk, IT audit, SOC reporting and cybersecurity assurance services. EY is a globally recognised auditor for cloud service providers and helps organisations navigate complex regulatory requirements across financial services, technology and public sectors.

SOC 1 (Type I & II)SOC 2 (Type I & II)Cybersecurity AuditsIT Risk Assessments+4
View auditor
Forvis Mazars UK

Forvis Mazars UK

London500+ employees

Forvis Mazars UK offers a comprehensive IT assurance and advisory practice including ISAE 3402/SOC 1, SOC 2/3, ISAE 3000, cyber security assessments, IT internal audit and IT due diligence.

ISAE 3402 (Type I & II)ISAE 3000SOC 1 (Type I & II)SOC 2 (Type I & II)+4
View auditor
Grant Thornton UK

Grant Thornton UK

London500+ employees

Grant Thornton UK delivers technology risk services, IT audit, cybersecurity assessments and ISAE 3402 reporting. As a leading mid-market advisory firm, Grant Thornton provides tailored IT assurance solutions for growing businesses and public interest entities.

ISAE 3402 (Type I & II)Cybersecurity AuditsIT Risk AssessmentsSOX / ITGC+1
View auditor
KPMG UK

KPMG UK

London500+ employees

KPMG UK offers technology risk management, IT audit and ISAE 3402/SOC reporting services. Their dedicated technology risk team provides assurance over IT general controls, application controls and emerging technology risks for organisations of all sizes.

ISAE 3402 (Type I & II)SOC 1 (Type I & II)SOC 2 (Type I & II)SOX / ITGC+4
View auditor
Kroll

Kroll

London500+ employees

Kroll is a global risk advisory firm providing cybersecurity audits, cyber risk assessments, and CREST accredited penetration testing. Their team includes CISA-certified auditors delivering comprehensive IT audit and assurance services across the UK and globally.

Cybersecurity AuditsIT Risk AssessmentsCREST Penetration TestingPenetratietests & Ethical Hacking
View auditor
LRQA

LRQA

London500+ employees

LRQA (formerly Lloyd's Register Quality Assurance) is a UK-headquartered certification body providing ISO 27001 certification, cybersecurity audits, internal audits and pre-assessment audits. Their global network of assessors delivers certification services across all industries.

ISO 27001 CertificeringCybersecurity AuditsISO 22301 (Business Continuity)ISO 9001 (Kwaliteit)
View auditor
NCC Group

NCC Group

Manchester500+ employees

NCC Group is a global cyber security and resilience firm listed on the London Stock Exchange. They provide NCSC assured services, cyber resilience audits, cybersecurity assessments and penetration testing services for organisations across all sectors.

NCSC Cyber Assessment Framework (CAF)Cybersecurity AuditsPenetratietests & Ethical HackingCREST Penetration Testing+1
View auditor
PwC UK

PwC UK

London500+ employees

PwC UK provides comprehensive technology risk assurance, IT audit and advisory services. As one of the Big Four professional services firms, PwC offers deep expertise in ISAE 3402/SOC reporting, ISO 27001 implementation and audit, and cybersecurity assurance for organisations across all sectors.

ISAE 3402 (Type I & II)SOC 1 (Type I & II)SOC 2 (Type I & II)ISO 27001 Certificering+5
View auditor
RSM UK

RSM UK

London500+ employees

RSM UK provides technology risk assurance, IT audit, SOC reporting and IT internal audit services. As one of the largest advisory firms in the UK, RSM offers pragmatic IT assurance solutions tailored to mid-market and growing organisations.

ISAE 3402 (Type I & II)SOC 1 (Type I & II)SOC 2 (Type I & II)Cybersecurity Audits+3
View auditor
SGS UK

SGS UK

London500+ employees

SGS UK provides ISO 27001 certification audits and information security management assessments. As the world's leading testing, inspection and certification company, SGS delivers trusted certification services for organisations seeking ISO compliance.

ISO 27001 CertificeringISO 22301 (Business Continuity)ISO 9001 (Kwaliteit)
View auditor

This page shows 36 IT audit firms in the United Kingdom: Amethyst Risk Management (London), Brand Compliance (Antwerpen), Centre for Assessment (Warrington), Complyport (London), Consilium Labs (London), ITGRC Advisory (London), Securance (Utrecht), Bridewell (London), GRC Solutions (Ely), Henderson Loggie (Glasgow), Prescient Security (London), A-LIGN (London), Baker Tilly UK (London), Coalfire (London), Crowe UK (London), MHA (London), Moore Kingston Smith (London), PKF Littlejohn (London), Protiviti UK (London), Saffery (London), Schellman (London), BDO UK (London), BSI Group (London), Bureau Veritas UK (London), Deloitte UK (London), DNV UK (London), EY UK (London), Forvis Mazars UK (London), Grant Thornton UK (London), KPMG UK (London), Kroll (London), LRQA (London), NCC Group (Manchester), PwC UK (London), RSM UK (London), SGS UK (London).