IT Internal Auditor

Job Purpose

We are looking for a Senior IT Internal Auditor to join our company. The job holder will provide independent, risk-based assurance over IT governance, cybersecurity, technology risk management, data, digital platforms, outsourcing and IT controls, supporting Life and Non-Life insurance operations. This role reports to the Chief Audit Executive.

What you will do

• Plan and execute risk-based IT audits across the ICT, cybersecurity, data governance, digital resilience and technology risk areas
• Assess the design and operating effectiveness of respective controls and assess compliance with the respective regulatory framework and corporate rules requirements
• Perform audit testing, document work performed, evaluate evidence and support conclusions in accordance with internal audit methodology
• Apply data analytics techniques to support audit procedures, including analysis of large datasets, identification of anomalies, and generation of risk-focused insights
• Act as the department’s Data Analytics expert by designing data-driven audit procedures using analytics tools following Group Audit requirements, and by supporting other audit team members in analytics-based audit work
• Draft clear audit findings, including root cause, risk impact and practical remediation actions
• Communicate risks clearly to technical and non-technical stakeholders, including senior management
• Monitor and validate the implementation of agreed management actions within agreed target dates
• Support the development of the annual and multi-year IT Audit Plan and contribute to the IT Audit Universe risk assessment

What you bring

• Bachelor’s degree in Computer Science, Information Systems, Information Technology or a related field
• Professional certification such as CISA, CRISC, CIA, or CISSP
• Minimum 4-5 years of experience in IT internal/external audit or IT risk management
• Experience in insurance or financial services, preferably in a multinational environment
• Experience with audit management tools, preferably TeamMate or an equivalent platform
• Working knowledge of SQL and experience with data analytics and visualization tools, such as Power BI or equivalent tools
• Working knowledge of relevant technology environments, including operating systems, network and cloud infrastructure, Microsoft 365 and enterprise applications such as Oracle or equivalent systems
• Strong knowledge of internal audit methodology, risk-based auditing, risk assessment and internal control principles