Internal Audit Manager - Tech

Who are we?

Look at the latest headlines and you will see something Ki insures. Think space shuttles, world tours, wind farms, and even footballers’ legs.

Ki’s mission is simple. Digitally disrupt and revolutionise a 335-year-old market. Working with Google and UCL, Ki has created a platform that uses algorithms, machine learning and large language models to give insurance brokers quotes in seconds, rather than days.

Ki is proudly the biggest global algorithmic insurance carrier. It is the fastest growing syndicate in the Lloyd's of London market, and the first ever to make $100m in profit in 3 years.

Ki’s teams have varied backgrounds and work together in an agile, cross-functional way to build the very best experience for its customers. Ki has big ambitions but needs more excellent minds to challenge the status-quo and help it reach new horizons.

Where you come in?

We’re modernising an industry that hasn’t changed in 300 years by building the first fully digital, data-led Ki platform in the London Market. As our internal audit manager, you’ll play a vital role in this transformation by leading and delivering internal audits across Ki and Ki Syndicate 1618. You’ll focus on critical technology and IT audits-including technology change, data governance, software development, algorithmic underwriting, machine learning, cloud, cybersecurity, and information security. You’ll also support our team on insurance audits like claims, pricing, and underwriting. You’ll collaborate with key stakeholders and audit colleagues to help us identify risks and shape solutions that continuously improve our control environment. Ultimately, your work will provide independent assurance to our audit committee, executive committee, and the wider business that we're managing our major risks effectively, helping us grow safely and boldly.

What you will be doing:

• Assess the adequacy and operating effectiveness of the processes and controls in place for identifying, analysing and ensuring key risks are managed and are within Ki’s Risk Appetite (i.e. to examine, challenge, test and critique Ki’s Risk Management Process).
• Ensure that audits in the Annual Internal Audit Plan are delivered in accordance with the Internal Audit Procedures i.e. validating through independent review/audit of relevant documentation of the control framework including Policies, Protocols, Processes, Procedures, Information Security & Privacy Management Systems Frameworks, Underwriting Guidelines etc. and completing ad hoc assignments as required.
• Liaise with key stakeholders to plan and thereafter scope the assigned audits using the Ki Internal Audit Procedures.
• Produce planning documentation for all audits using templates in place and in agreed formats. This includes preparing a Risk and Control Matrix, for all audits and supporting working papers to produce a comprehensive audit file.
• Conduct audit fieldwork in line with Ki Internal Audit Procedures, which will include application of audit techniques such as interviews; meetings to evidence controls cited in the interviews or otherwise; detailed substantive work or controls testing (sample sizes to be determined by the Internal Audit Manager using Ki’s Internal Audit sampling methodology).
• Record the results of all testing to a clear, concise and “re-performable standard” in the Risk and Control Matrix. An independent reviewer of the audit should be able to understand what has been tested, why, how and when without a need to query the Internal Audit Manager; recognise audit evidence relied upon to reach a conclusion, as is clearly cited and reobtainable from the relevant business area. The test results should be documented to a standard that can be used to update the Group RR and to a standard that can be used to populate the audit report. This means that the audit report is not written from scratch, instead a template will be produced from the Risk and Control Matrix and the report refined thereafter.
• Negotiate acceptance of findings and actions with Management. Thereafter, produce Internal Audit reports to a professional standard (for distribution to Management; the Executive and the Non-Executive Directors; the External Auditors; and potentially external parties such as the PRA, FCA, Lloyd’s, etc.), in line with Ki’s Internal Audit report format.
• Liaise with Management for ongoing oversight and monitoring of agreed audit actions. This will include performing a sense check of the information/evidence supplied by the business to confirm completion of the action point.
• Assist the Senior Manager with preparing relevant Audit Committee and Board papers on a quarterly basis delivering clear, concise messaging on key topics. Assist the Senior Manager in planning the audit timetable for the forthcoming year, including audit selection criteria.
• Contribute to the development of audit techniques including using data analytics and AI tools (e.g. Gemini, ClaudeCode, CoPilot) to ensure continuing improvement in the standard of audit work and continuing relevance to business needs.

Requirements

• Relevant qualification including one or more of the following: ACA or equivalent professional qualification; degree or equivalent experience; ACII or equivalent insurance qualification.
• A background of completing IT audits, with an up-to-date technical knowledge of IT auditing standards, ideally CISA or equivalent IT audit qualification.
• A good knowledge and understanding of the risks inherent in the general insurance industry specifically digital and algorithmic Underwriting (preferably with particular focus on the Lloyd’s market).
• A high level of understanding of the business and IT controls expected to be in place in a general insurance Group (preferably a Lloyd’s Managing Agent and Lloyd’s Syndicates) to manage risk.
• Familiarity with operational risk management techniques, including the concepts of risk appetite, risk register, risk scoring and prioritisation, control risk self-assessment and risk committees.
• Experience working within professional audit; or a strong operational insurance background e.g. experience within a relevant professional services organisation.
• Prior experience in the planning and execution of work to provide assurance over the design and operating effectiveness, and documentation of internal controls.
• Knowledge of the technical aspects of Underwriting and non-Underwriting support functions.
• A good working knowledge and awareness of financial accounting and reporting standards (IFRS) and Solvency II.
• Awareness or working knowledge of Sarbanes Oxley.
• Proficient at producing professionally written audit reports.
• Proactive and competent in taking ownership of any given review and its end-to-end delivery.