Job DescriptionJob Summary:The Internal Audit Manager is responsible for leading and executing risk-based internal audit activities that evaluate the effectiveness of governance, risk management, internal control, systems, data flows, and operational processes across the organization. This role manages audit engagements from planning through reporting, uses a data-first approach to test full populations and identify meaningful risk patterns, applies approved analytics, automation, and AI-enabled tools to work smarter, and helps build scalable audit practices that improve efficiency, insight, and risk coverage. The ideal candidate demonstrates strong judgment, professional skepticism, leadership capability, business acumen, and readiness to grow in scope and influence.
Job Duties:- Lead complex risk-based audits from planning through reporting, aligned to Internal Audit methodology, professional standards, quality expectations, and enterprise risk priorities; design work programs, sequencing, staffing, documentation, and scalable approaches where practical.
- Lead risk anticipation and dynamic scoping across operational, financial, regulatory, technology, fraud, vendor, catastrophe, capacity, data-quality, automation, AI/model, and emerging risks; translate Citizens-specific context into audit coverage decisions and audit plan input.
- Build audit staff capability through coaching, review, cross-training, analytics adoption, engagement feedback, knowledge sharing, performance input, engagement-level evaluations, and modeling director-ready judgment, independence, and leadership behaviors.
- Lead data-first control evaluation and evidence assessment, including data availability, lineage, population definition, data reliability, full-population testing, systems/interface analysis, automated control testing, exception analysis, and issue development.
- Translate audit results for business unit, executive, and senior management; explain root cause, business impact, issue severity, practical action plans, and remediation status in clear, leadership-ready reports and discussions.
- Coordinate with Enterprise Risk, Internal Controls, Compliance, Inspector General, IT Security, Legal, external audit, and other assurance partners to promote comprehensive risk coverage, reduce duplication, support continuous assurance, and maintain effective collaborative assurance practices.
- Develop scalable audit execution practices, including reusable analytics, standardized work programs, common testing methods, continuous assurance routines, and repeatable approaches that improve audit coverage and reduce unnecessary rework.
Required Education and Experience: - High School Diploma | GED
- Bachelor's Degree OR 3 years relevant experience, OR a combination of college education and relevant experience equivalent to 3 years. (Accounting, Finance, Auditing, Risk Management, Business Administration, Property & Casualty Insurance, Information Systems, Data Analytics, or related field)
AND
- 7+ years of professional internal audit, risk, controls, public accounting, compliance, or relevant Property & Casualty insurance experience, including 3+ years leading audit engagements, supervising staff or project teams, and presenting results to senior management. Experience should include complex processes, financial, operational, technology, data analytics, or regulatory audits in a highly regulated environment. Experience should demonstrate the ability to lead analytics-enabled, systems aware, and cross-functional audit work, including data-driven testing, technology risk considerations, and practical communication of risk impact to senior management.
Preferred Experience/Education:- Experience in a Property & Casualty insurer, residual market mechanism, public insurer, or highly regulated financial services environment.
- Demonstrated ability to lead complex audits that include business processes, systems, data flows, technology, automated controls, vendors, data analytics, and regulatory dimensions.
- Professional certification such as CIA, CPA, CISA, CRMA, ARM, CRM, CPCU, or equivalent relevant credential.
- Strong succession potential, including executive presence, balanced judgment, business acumen, people leadership, and ability to manage cross-functional assurance relationships.
- Advanced proficiency with Microsoft Office and audit management, analytics, visualization, approved AI-enabled, or GRC tools.
- Experience developing reusable audit analytics, standardized testing approaches, continuous assurance routines, or other scalable audit execution practices.
Knowledge Skills and Abilities:- Advanced knowledge of internal audit principles, Internal Audit methodology, IIA Standards, risk based audit planning, quality expectations, engagement supervision, and documentation.
- Proven knowledge of leadership, facilitation, change management, communication, and stakeholder management principles required to interact with all levels of management.
- Strong command of data availability, lineage, population definition, data reliability, data quality, analytics, exception analysis, and business translation of analytics results.
- Advanced knowledge of internal control, risk management, governance, fraud risk, regulatory compliance, root-cause analysis, issue calibration, and remediation monitoring practices.
- Knowledge of business processes, systems, interfaces, data flows, automated controls, cyber, AI/model, vendor, and technology dependency considerations, including when specialist support is needed.
- Knowledge of continuous assurance, continuous monitoring concepts, reusable analytics, standardized testing approaches, and scalable audit execution practices.
- Lead and perform complex audit projects, adapt the audit approach as risks evolve, and deliver high-quality work within budget and timeline expectations.
- Build consensus across business units and assurance partners while preserving audit objectivity and achieving results through influence.
- Analyze complex business processes, systems, data populations, automated controls, data quality, and evidence to reach well-supported conclusions and recommendations.
- Build staff capability by coaching, cross-training, reviewing work, encouraging analytics adoption, sharing knowledge, and maintaining independence, accountability, professional skepticism, and sound judgment.
- Communicate clearly in writing and verbally, facilitate challenging meetings, present to both small and large groups, and translate findings, analytics, and technology issues into business impact.
- Organize competing priorities, lead change, remain resilient under pressure, and demonstrate readiness for broader responsibilities.
