Internal Audit Manager - Tech

Who are we?👋

Look at the latest headlines and you will see something Ki insures. Think space shuttles, world tours, wind farms, and even footballers’ legs.

Ki’s mission is simple. Digitally disrupt and revolutionise a 335-year-old market. Working with Google and UCL, Ki has created a platform that uses algorithms, machine learning and large language models to give insurance brokers quotes in seconds, rather than days.

Ki is proudly the biggest global algorithmic insurance carrier. It is the fastest growing syndicate in the Lloyd’s of London market, and the first ever to make $100m in profit in 3 years.

Ki’s teams have varied backgrounds and work together in an agile, cross-functional way to build the very best experience for its customers. Ki has big ambitions but needs more excellent minds to challenge the status-quo and help it reach new horizons.

Where you come in?

We’re modernising an industry that hasn’t changed in 300 years by building the first fully digital, data-led Ki platform in the London Market. As our internal audit manager, you’ll play a vital role in this transformation by leading and delivering internal audits across Ki and Ki Syndicate 1618. You’ll focus on critical technology and IT audits—including technology change, data governance, software development, algorithmic underwriting, machine learning, cloud, cybersecurity, and information security. You’ll also support our team on insurance audits like claims, pricing, and underwriting. You’ll collaborate with key stakeholders and audit colleagues to help us identify risks and shape solutions that continuously improve our control environment. Ultimately, your work will provide independent assurance to our audit committee, executive committee, and the wider business that we’re managing our major risks effectively, helping us grow safely and boldly.

What you will be doing: 🖋️

• Assess the adequacy and operating effectiveness of the processes and controls in place for identifying, analysing and ensuring key risks are managed and are within Ki’s Risk Appetite (i.e. to examine, challenge, test and critique Ki’s Risk Management Process).
• Ensure that audits in the Annual Internal Audit Plan are delivered in accordance with the Internal Audit Procedures i.e. validating through independent review/audit of relevant documentation of the control framework including Policies, Protocols, Processes, Procedures, Information Security & Privacy Management Systems Frameworks, Underwriting Guidelines etc. and completing ad hoc assignments as required.
• Liaise with key stakeholders to plan and thereafter scope the assigned audits using the Ki Internal Audit Procedures.
• Produce planning documentation for all audits using templates in place and in agreed formats. This includes preparing a Risk and Control Matrix, for all audits and supporting working papers to produce a comprehensive audit file.
• Conduct audit fieldwork in line with Ki Internal Audit Procedures, which will include application of audit techniques such as interviews; meetings to evidence controls cited in the interviews or otherwise; detailed substantive work or controls testing (sample sizes to be determined by the Internal Audit Manager using Ki’s Internal Audit sampling methodology).
• Record the results of all testing to a clear, concise and “re-performable standard” in the Risk and Control Matrix. An independent reviewer of the audit should be able to understand what has been tested, why, how and when without a need to query the Internal Audit Manager; recognise audit evidence relied upon to reach a conclusion, as is clearly cited and reobtainable from the relevant business area. The test results should be documented to a standard that can be used to update the Group RR and to a standard that can be used to populate the audit report. This means that the audit report is not written from scratch, instead a template will be produced from the Risk and Control Matrix and the report refined thereafter.
• Negotiate acceptance of findings and actions with Management. Thereafter, produce Internal Audit reports to a professional standard (for distribution to Management; the Executive and the Non-Executive Directors; the External Auditors; and potentially external parties such as the PRA, FCA, Lloyd’s, etc.), in line with Ki’s Internal Audit report format.
• Liaise with Management for ongoing oversight and monitoring of agreed audit actions. This will include performing a sense check of…