IT Internal Audit Manager
MS Amlin
A complete application in a minute
Tailored resume and cover letter, ready to send.
Job summary
MS Amlin is seeking an IT Internal Audit Manager to lead technology-focused assurance and advisory engagements across IT governance, cybersecurity, data governance, and digital transformation. You will supervise IT audit teams, promote analytics, and oversee integrated assurance activities.
The role emphasizes identifying control weaknesses, leveraging AI-enabled auditing techniques, and aligning with IIA standards. Occasional travel and collaboration with risk and IT leadership are expected.
Qualifications
- Education: Master’s degree in Computer Science, Information Systems, IT Audit, or a related field.
- Proven experience leading complex IT audit engagements in technology risk and cybersecurity domains.
- Experience with data analytics and integrated assurance approaches.
Responsibilities
- Lead and manage IT-focused assurance and advisory engagements from planning through reporting and follow-up.
- Develop audit scopes, objectives, testing strategies, and engagement plans aligned with technology risks.
- Supervise engagement teams and allocate resources to ensure timely, high-quality delivery.
- Draft and present audit observations and risk implications to management and IA leadership.
- Promote data analytics, automation, and continuous auditing within IT audit practice.
- Coach and develop IT auditors and ensure QAIP compliance.
- Coordinate with information security, risk management, and compliance functions.
Skills
Education
Tools
Job description
Job Title: IT Internal Audit Manager
Department / Function: Internal Audit (Central Function)
Reporting Line: Internal Audit Director
Location: Any
Employment Type: Full-time, Permanent employment contract
Leadership Responsibility: No
The IT Internal Audit Manager is responsible for leading and supervising technology-focused Internal Audit assurance and advisory engagements covering information technology, cybersecurity, data governance, digital transformation, operational resilience, and technology-enabled business processes. The role contributes to protecting and enhancing organizational value through independent assessment of: IT governance, Information security, Cybersecurity controls, IT operations, Technology risk management, Data integrity, Digital transformation initiatives, IT-enabled internal controls. The role operates in alignment with: IIA Global Internal Audit Standards (2024), Internal Audit methodology, Technology risk frameworks, Applicable regulatory and supervisory requirements, Organizational governance expectations.
The IT Internal Audit Manager acts as a technical audit lead responsible for: Managing complex IT audit engagements, Supporting technology-enabled auditing practices, Promoting data analytics and audit innovation, Supervising IT auditors and audit teams, Supporting integrated assurance and digital risk oversight.
Lead and manage IT-focused assurance and advisory engagements from planning through reporting and follow-up. Perform technology risk assessments and develop audit scopes, objectives, testing strategies, and engagement plans aligned with organizational technology risks. Supervise engagement teams and allocate resources effectively to ensure timely and high-quality delivery. Ensure IT audit engagements comply with:
- Internal Audit methodology
- IIA Standards
- QAIP requirements
- Technology audit best practices
Monitor engagement progress, resource utilization, quality standards, and timelines.
Lead and supervise audits covering:
- IT governance
- IT General Controls (ITGCs)
- Cybersecurity
- Identity & Access Management (IAM)
- Change management
- Cloud services
- Infrastructure and operations
- Data governance and data integrity
- ERP and core business systems
- Digital transformation programs
- Third-party technology risks
- Operational resilience and disaster recovery
- AI and emerging technology risks
Assess design and operating effectiveness of technology-related controls and identify control weaknesses, vulnerabilities, and governance gaps. Evaluate adequacy of:
- Cybersecurity frameworks
- Monitoring processes
- Incident response capabilities
- Recovery planning
- Technology risk management governance
Evaluate technology risks associated with:
- Outsourcing
- Cloud computing
- Data privacy
- Automation
- Emerging technologies
Draft and review clear, concise, and risk-focused IT audit reports and stakeholder communications. Present audit observations, recommendations, and technical risk implications to management and Internal Audit leadership. Communicate complex technology risks to non-technical stakeholders clearly and effectively. Facilitate meetings, walkthroughs, risk discussions, and remediation reviews with business and technology stakeholders. Escalate significant technology risks, cybersecurity concerns, or control weaknesses appropriately.
Promote effective use of:
- Data analytics
- Continuous auditing
- Automated control testing
- AI-enabled auditing techniques
- Technology-enabled assurance approaches
Utilize audit management tools and data analytics platforms effectively (e.g., Optro, TeamMate+, Power BI, analytics tools). Support development and enhancement of IT audit methodologies, testing approaches, and technical audit procedures. Identify opportunities to modernize Internal Audit practices through automation, analytics, and emerging technologies. Contribute to continuous improvement initiatives related to IT audit quality, efficiency, and innovation.
Ensure IT audit engagements conform with:
- IIA Standards
- Internal Audit methodology
- QAIP expectations
- Technology audit quality requirements
Perform engagement-level quality reviews of workpapers, evidence, testing approaches, and reports. Support QAIP activities including:
- Ongoing monitoring
- Internal assessments
- Methodology reviews
- Improvement initiatives
- External Quality Assessment preparation activities
Promote consistency, quality, and continuous improvement across IT audit activities.
Supervise and coach IT auditors, auditors, and engagement team members during audit activities. Provide technical guidance and mentorship regarding:
- IT risks
- Cybersecurity
- Data analytics
- Technology controls
- Audit methodologies
Promote continuous learning, innovation, and technical competency development within the Internal Audit function. Contribute to onboarding, performance feedback, and capability development activities. Promote professionalism, collaboration, accountability, and ethical conduct across engagement teams.
Coordinate with:
- Information Security
- Risk Management
- Compliance
- Data Governance
- Privacy
- External Audit
- Technology leadership teams
- Other assurance providers
Support development of assurance mapping and coordinated assurance activities related to technology and cybersecurity risks. Identify opportunities to reduce assurance duplication and improve organizational risk coverage.
Delivery of high-quality IT audit engagements within agreed scope, timelines, and quality standards. Conformance of IT audit work with the IIA Global Internal Audit Standards and Internal Audit methodology. Accuracy, clarity, and credibility of IT audit findings and reports. Effective supervision and performance feedback for assigned audit team members. Authority to elevate significant IT risk issues, control weaknesses, or audit quality concerns to senior Internal Audit leadership.
Unrestricted access to IT-related systems, data, documentation, and personnel relevant to audit scope. Authority to define and adjust IT audit scope and procedures based on risk. Authority to challenge IT governance, security controls, and risk management practices. Authority to recommend the use of specialized or co-sourced IT audit resources where justified.
Education: Master’s degree in Computer Science, Information Systems, IT Audit, or a related field.
Professional Experience: Typically 8+ years of experience in IT audit, IT risk management, or information security. Proven track record of leading complex IT audit engagements. Experience in the insurance or financial services sector preferred.
Technical / Professional Knowledge: Strong knowledge of:
- IT General Controls (ITGCs)
- Cybersecurity frameworks
- IT governance frameworks
- Data governance
- Cloud computing risks
- Identity & Access Management (IAM)
- Change and release management
- Technology operations and resilience
- Risk assessment methodologies
- Internal Audit methodologies
Working knowledge of:
- AI and emerging technologies
- Data analytics and visualization
- Operational resilience
- Third-party technology risk
- Data privacy and regulatory requirements
- Continuous auditing techniques
Experience applying:
- Data analytics
- Technology-enabled auditing
- Automated control testing
- Audit management systems and workflow tools
Certifications: One or more relevant certifications strongly preferred (e.g., CISA, CISM, CISSP, CRISC)
The role is expected to actively demonstrate and promote the MS&AD values framework: Customer Focus Provides practical, business-relevant, technology risk assurance insights Integrity Demonstrates objectivity, ethics, professionalism, transparency, and professional skepticism Teamwork Promotes collaboration, inclusion, knowledge sharing, and effective cross functional coordination Innovation Encourages continuous improvement, audit modernization, and adoption of emerging technologies Professionalism Demonstrates accountability, technical excellence, and commitment to high-quality outcomes.
Additional competencies: Analytical and critical thinking Leadership and engagement supervision capability Strong Communication and presentation skills Ability to communicate technical risks to non-technical audiences Negotiation and conflict management Professional skepticism and sound judgment Stakeholder management capability Adaptability and resilience.
Audit management systems (e.g., Optro, TeamMate+) Data analytics and visualization tools (e.g., Power BI, Tableau, ACL, IDEA) Cybersecurity and monitoring tools GRC platforms Cloud and infrastructure management environments M365 / Microsoft Office tools Continuous auditing and automation tools.
Internal Stakeholders:
- Head and Deputy Head of Internal Audit
- Senior Internal Audit Managers and audit teams
- IT leadership and technology functions
- Risk Management, Compliance, Legal, Finance
- Business and operational management
External Stakeholders:
- Regulators and supervisory authorities (as applicable)
- External auditors
- Co-sourcing and specialist IT audit providers
Occasional domestic and international travel may be required. Hybrid or flexible working arrangements subject to organizational policy. High degree of confidentiality and professional discretion required. Frequent interaction with technology leadership, management, and assurance functions. Responsibility for managing complex and sensitive technology-related audit matters.
The role operates in full compliance with: IIA Global Internal Audit Standards (2024), IIA Code of Ethics, Applicable laws, regulations, and supervisory requirements, Internal Audit methodology, policies, and governance frameworks. In an uncertain world, we believe trust is built through consistency, care, and genuine collaboration. At MSIG Europe, we take the time to understand our clients’ needs and shape pragmatic solutions that truly protect their business. Guided by a people-first vision rooted in our Japanese heritage, we’re here to build lasting relationships - grounded in trust, every day. MSIG Europe is part of the top 10 global insurance provider MS&AD and has a long-standing legacy of providing insurance solutions to companies of all sizes around the world. We understand and calculate risks to protect businesses and help mitigate the inevitable and varied challenges. Headquartered in Brussels, Belgium, MSIG Europe operates from Belgium, France, Germany, Italy, the Netherlands, Slovakia, Spain and the UK. Our Japanese heritage defines our guiding principles of respect, trust and care, and ensures the backbone of a strong global network.
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
