Risk

IT Internal Audit (outsourced/co-sourced)

Fully outsourced or co-sourced IT internal audit services. An external IT audit team executes your internal audit plan, including ITGC testing, technology risk assessments and reporting to the audit committee.

12 auditors for IT Internal Audit (outsourced/co-sourced)

Complyport
London11-50 employees

Complyport is a specialist compliance and IT audit firm focused on FCA and PRA regulated financial services firms. They deliver IT and cybersecurity audits, IT audit plans, and cyber risk assessments tailored to the regulatory requirements of the UK financial sector.

Cybersecurity AuditsIT Risk AssessmentsFCA/PRA Operational ResilienceIT Internal Audit (uitbesteed)
Henderson Loggie
Glasgow51-200 employees

Henderson Loggie is a leading Scottish accountancy firm offering specialist IT audit services including ISAE 3402 Type I & II reporting, IT internal audit, cybersecurity and digital resilience assessments, and UK GDPR compliance audits. With deep expertise in the Scottish market, they provide comprehensive assurance services to organisations across the UK.

ISAE 3402 (Type I & II)Cybersecurity AuditsUK GDPR / Data Protection AuditIT Internal Audit (uitbesteed)
Crowe UK
London201-500 employees

Crowe UK provides IT audit, technology risk, SOC 1/2 reporting, IT internal audit and ITGC testing services. Part of the global Crowe network, their UK practice combines international methodology with local expertise for effective IT assurance engagements.

ISAE 3402 (Type I & II)SOC 1 (Type I & II)SOC 2 (Type I & II)SOX / ITGC+2
Protiviti UK
London201-500 employees

Protiviti UK offers internal IT audit, technology risk consulting, SOX ITGC testing and co-sourced/outsourced IT audit services. Their team provides flexible IT audit solutions for organisations seeking to strengthen their technology risk management.

SOX / ITGCCybersecurity AuditsIT Risk AssessmentsThird-Party / Vendor Risk Audits+1
BDO UK
London500+ employees

BDO UK provides IT audit, assurance and certification services including SOX 404, ISAE 3402, SOC 2, PCI DSS and data privacy audits. Their dedicated technology risk team serves financial services, technology and public sector clients across the UK.

ISAE 3402 (Type I & II)SOC 2 (Type I & II)SOX / ITGCPCI DSS Audits+4
Deloitte UK
London500+ employees

Deloitte UK delivers IT audit and assurance, third party assurance (ISAE 3402, SOC 1/2/3), and controls assurance services. With one of the largest technology risk practices in the UK, Deloitte supports organisations in managing complex IT risk and compliance requirements.

ISAE 3402 (Type I & II)SOC 1 (Type I & II)SOC 2 (Type I & II)SOC 3+5
EY UK
London500+ employees

EY UK provides technology risk, IT audit, SOC reporting and cybersecurity assurance services. EY is a globally recognised auditor for cloud service providers and helps organisations navigate complex regulatory requirements across financial services, technology and public sectors.

SOC 1 (Type I & II)SOC 2 (Type I & II)Cybersecurity AuditsIT Risk Assessments+4
Forvis Mazars UK
London500+ employees

Forvis Mazars UK offers a comprehensive IT assurance and advisory practice including ISAE 3402/SOC 1, SOC 2/3, ISAE 3000, cyber security assessments, IT internal audit and IT due diligence.

ISAE 3402 (Type I & II)ISAE 3000SOC 1 (Type I & II)SOC 2 (Type I & II)+4
Grant Thornton UK
London500+ employees

Grant Thornton UK delivers technology risk services, IT audit, cybersecurity assessments and ISAE 3402 reporting. As a leading mid-market advisory firm, Grant Thornton provides tailored IT assurance solutions for growing businesses and public interest entities.

ISAE 3402 (Type I & II)Cybersecurity AuditsIT Risk AssessmentsSOX / ITGC+1
KPMG UK
London500+ employees

KPMG UK offers technology risk management, IT audit and ISAE 3402/SOC reporting services. Their dedicated technology risk team provides assurance over IT general controls, application controls and emerging technology risks for organisations of all sizes.

ISAE 3402 (Type I & II)SOC 1 (Type I & II)SOC 2 (Type I & II)SOX / ITGC+4
PwC UK
London500+ employees

PwC UK provides comprehensive technology risk assurance, IT audit and advisory services. As one of the Big Four professional services firms, PwC offers deep expertise in ISAE 3402/SOC reporting, ISO 27001 implementation and audit, and cybersecurity assurance for organisations across all sectors.

ISAE 3402 (Type I & II)SOC 1 (Type I & II)SOC 2 (Type I & II)ISO 27001 Certificering+5
RSM UK
London500+ employees

RSM UK provides technology risk assurance, IT audit, SOC reporting and IT internal audit services. As one of the largest advisory firms in the UK, RSM offers pragmatic IT assurance solutions tailored to mid-market and growing organisations.

ISAE 3402 (Type I & II)SOC 1 (Type I & II)SOC 2 (Type I & II)Cybersecurity Audits+3

Need help choosing?

Request a free quote and we'll help you find the right auditor.