Awais Naseem

Senior Manager IT Audits and Compliance @Bullhorn

London, GB

As Senior Manager – IT Audits & Compliance, I lead and support initiatives that drive stronger IT governance, enhanced risk visibility, and sustained regulatory compliance. I manage a team of four and facilitate the implementation of enterprise-wide GRC programs that help the organization maintain a strong security posture and operational efficiency.I work closely with leadership to establish governance frameworks, policies, and compliance dashboards that enable informed, risk-based decisions. I manage IT risk activities, including assessments, maintaining the risk register, and tracking treatment plans to reduce exposure and strengthen controls. I also oversee external audits (SOC 1, SOC 2, ISO 27001), consistently achieving zero major findings over the past two years.My responsibilities include developing multi-year IT audit plans, reviewing audit deliverables, evaluating internal controls, and presenting GRC insights to senior stakeholders. I coordinate compliance efforts across multiple frameworks, including ISO 27001, SOC, NIST, CMMC, and the EU AI Act, improving efficiency and reducing overlap.I also mentor team members and lead awareness initiatives to build a strong culture of compliance and shared risk ownership across the organization.Key Achievements-Consolidated five subsidiary ISMS frameworks into a single ISO 27001 ISMS, cutting audit time by 40% with zero non-conformities-Strengthened AWS, Azure, and GCP environments, reducing critical/high issues by 85%-Expanded SOC 1 & 2 coverage from 5 to 12 applications, enhancing control assurance-Broadened internal audit coverage to all critical systems, improving visibility and remediation timelines-Optimized audit cycles, reducing completion timelines by 30% and improving stakeholder engagement.