Returner: IT Audit, Group Internal Audit

Convex Insurance

This job is closed: the employer no longer lists it.

Responsibilities

IT risk assessment: engage with IT and security teams to understand our technology roadmap, key software assets, and emerging digital risks.
Technical audit planning: assist in drafting audit plans focused on IT General Controls (ITGCs), cyber security frameworks, change management, and data integrity.
Audit execution: evaluate the design and operational effectiveness of IT controls, identifying system vulnerabilities, data quality concerns, or compliance gaps.
Reporting & collaboration: formulate clear, non-technical explanations of complex IT risks and present them alongside practical, technology-driven recommendations to management.
Continuous monitoring: monitor technology developments and collaborate with IT stakeholders to ensure robust implementation of agreed remediation actions.

You hold a relevant professional certification (such as CISA, CRISC, CISSP, ACA, or equivalent) and have prior experience in IT audit, technology risk consulting, or IT control environments.
You are returning from a career break of 2 years or more and are keen to re-apply your technology risk expertise in a modern, cloud-first organisation.
A natural curiosity about emerging technologies (such as cloud computing, AI, and modern data platforms) and how they integrate into business processes.
The ability to translate technical IT risk issues into clear, commercial language for non-technical stakeholders.
A proactive attitude that thrives on teamwork, sharing insights, and working together to improve our overall security and operational posture.