Technology Audit Manager

Role Overview

This role is hybrid, requiring one day a week in the Cardiff Office. Part‑time or compressed hours are acceptable. The Head of Change & Technology Audits will shape and deliver change audit across the Group, with significant input into technology audit planning. The position elevates capability in Change & Technology, aligning efforts with the Group Strategy and driving technology‑driven outcomes such as AI, data‑led and customer‑centric solutions.

Key responsibilities include developing change assurance approaches, applying a data‑enabled audit approach, and raising the expertise of the internal audit team in change assurance. The role involves leadership support on emerging risks, continuous assessment of the audit landscape, and stakeholder engagement with senior managers across the Group.

• Support the delivery of the Audit plan with a focus on Change & Technology, including targeting delivery and input into specific areas.
• Oversee and manage Change (and some Technology) Audits across geographical entities.
• Coordinate with key stakeholders and management for all Change Assurance, especially where audits cross into Technology between entities.
• Attend and observe key meetings across the Group related to Technology & Change, including steering committee attendance where required.
• Leverage first‑ and second‑line tech, change and data insights to inform audit planning and coverage.
• Provide clear, concise reporting that links control gaps to business impact and root causes.
• Manage co‑source providers/contractors, ensuring value‑for‑money and consistent quality.
• Support recruitment and capability development for technology and change skills within the function.
• Monitor emerging risks (e.g., AI adoption, cloud security posture, API risk, platform resilience, data privacy changes).
• Advise leadership on the development of the Annual Audit Plan from a change perspective.

• Delivery of change and technology audits.
• Audit quality and stakeholder feedback.
• Team development.
• Contribution to Annual audit coverage.

• Strong organisational and planning skills, managing multiple audit projects and meeting deadlines.
• Knowledge of relevant regulatory requirements, ensuring compliance and accuracy in audit work.
• Professional scepticism and curiosity applied in audit planning and execution.
• Experience in Change & Transformation, Technology Risk, IT Assurance, Cyber or Technology Controls within a regulated or complex environment.
• Strong knowledge of technology control domains including ITGCs, IAM, cyber security fundamentals, change management and operational resilience.
• Integrity, honesty and professional courage, acting with honesty, accuracy and openness.
• Independence and objectivity, maintaining independence from undue influence.
• Competency and professionalism, maintaining sufficient technical knowledge and skills.

• Previous experience within the Insurance Sector.
• Proven practical experience in technology and data delivery supporting a wide technical understanding of technology interactions.

• 33 days holiday (including bank holidays) upon joining; increases up to 38 days with tenure.
• Option to buy or sell up to an additional five days of annual leave.
• Up to £3,600 of free shares each year after one year of service.
• People‑first culture with support for work‑life balance.

We are a diverse and inclusive business and commit to equal opportunities without discrimination on the basis of race, gender, age, sexuality or any other protected characteristics.