Audit Manager: Technology & Digital at Hollard Insurance

• The Audit Manager: Technology & Digital will play a key role in all phases of audit and advisory engagements and will interact with senior and middle management across the organisation. This role involves leading and executing audits, managing complex projects, conducting research, and delivering data-driven insights.
• Responsibilities include proactively identifying and evaluating risks across strategic, operational, compliance, reporting, and internal control domains, with a strong emphasis on those emerging technologies, cyber threats, data governance, cloud computing, AI, and evolving IT architectures. The Audit Manager will collaborate closely with stakeholders across IT, Risk, Compliance, and Business Units to ensure effective risk mitigation and governance.
• The role also contributes to the development and execution of the annual audit plan, driving innovation and digital transformation in audit and assurance approaches, and mentors team members to deliver high-quality, relevant, and timely assurance.

Key Objectives

Strategy and Planning:

• Partner with the Senior Audit Manager to shape and deliver the Technology/Digital/Data assurance strategy and contribute to a risk-based annual plan aligned to organisational priorities.
• Maintain an up-to-date view of the technology and data risk universe, including emerging risks from cloud adoption, platform change, AI enablement, third-party dependencies, and evolving security threats.
• Identify opportunities to enhance assurance coverage through integrated assurance, deeper thematic reviews, and improved use of analytics and automation.

Audit Plan Delivery:

• Provide assurance over cyber and information technology risk domains such as identity and access management, change management, vulnerability management, secure configuration oversight, incident response preparedness, and resilience/recovery capabilities.
• Evaluate technology governance and operational controls across infrastructure, applications, cloud services, and third parties, focusing on control effectiveness.
• Assess the effectiveness of enterprise data governance, including ownership, stewardship, policies/standards, data quality management, lineage, access controls, retention, and privacy compliance.
• Provide assurance over critical data domains and platforms (e.g., data lake/warehouse/analytics environments) focusing on data integrity, completeness, accuracy, and decision-usefulness.
• Assurance over major technology and business transformation programmes.
• Assurance over AI, including accountability, ethical use, model change management, monitoring, and controls to ensure outcomes are explainable, compliant, and aligned to business intent.

Stakeholder Engagement:

• Build trusted relationships across IT, Data, Security, Risk, Compliance, and Business leadership to become a credible and trusted advisor and business partner.
• Represent the Internal Audit function professionally and effectively in all interactions.
• Maintain a deep understanding of the business environment, strategic priorities, risks and challenges as well as prevailing legislation and emerging industry trends.
• Coordinate with second-line and external assurance providers to reduce duplication and strengthen combined assurance outcomes.

People Leadership & Development:

• Lead, coach, and develop team members; create a high-performance environment with strong quality, delivery discipline, and learning culture.

Financial & Operational Management:

• Manage engagement budgets and support cost-effective resource utilisation while maintaining quality and delivery timelines.
• Assist in developing the annual audit and advisory plan as well as determining resource needs.
• Leads engagements end-to-end, from scoping and risk assessment through to reporting and executive-level communication.
• Develops a thorough and comprehensive understanding of the overarching risk universe, processes and associated internal controls, issues, pertinent regulations and risks associated with the engagement scope.

Required Knowledge and Experience    
What you'll bring

• Minimum of 6–8 years’ relevant experience in information technology, digital, data, or cyber disciplines, with at least 2+ years in a leadership or manager role.
• Programme delivery or programme assurance experience would be an added advantage.
• Baseline understanding of Artificial Intelligence (AI) risk and governance concepts would be an added advantage.
• Proven experience in leading and managing high-performing teams.
• Strong track record of building and maintaining effective stakeholder relationships.
• Ability to manage and deliver complex projects within scope, time, and budget.
• Experience with project/programme governance structures.

Knowledge

Technology & Architecture

• Strong understanding of emerging technologies, enterprise technology environments, including applications, infrastructure, platforms, and integration patterns, as well as associated architecture.
• Cloud computing concepts and governance (IaaS/PaaS/SaaS), including secure configuration oversight and operational control expectations.

Data Governance & Management

• Data governance concepts including ownership, stewardship, policies/standards, data quality management, access, lineage, retention, and privacy expectations.
• Data management principles and quality.

Programme Assurance (Added Advantage)

• Knowledge of programme/project governance practices and how to evaluate delivery risk, dependencies, reporting, and decision-making effectiveness.

Risk, Control & Assurance

• Internal audit/assurance methodology and control evaluation approaches.
• Understanding of cyber risk domains (identity/access, vulnerability management governance, incident response, resilience) at governance and assurance level.

Educational Requirements    
Qualifications (nice to have, valued to bring)

• A relevant BSc degree (e.g., Information Systems, Computer Science, Engineering), and one or more of the following:
• Certified Information Security Manager (CISM)
• Certified Information Systems Auditor (CISA)
• PRINCE2 / PMP / Agile or SAFe
• Cloud certifications
• Data governance and Management
• Offensive Security Certified Professional (OSCP)
• Certified Ethical Hacker (CEH)
• Certified Internal Auditor (CIA) / Professional Internal Auditor (PIA)
• Certification in Risk Management Assurance (CRMA)
• Certified in Risk and Information Systems Control (CRISC)
• Any other IT certifications related to software development or information security (ISO27001, PCI-DSS etc.)

Deadline:29th May,2026