Internal Audit Manager - Lead

Job Summary:

The Internal Audit Manager is responsible for leading and executing risk-based internal audit activities that evaluate the effectiveness of governance, risk management, internal control, systems, data flows, and operational processes across the organization. This role manages audit engagements from planning through reporting, uses a data-first approach to test full populations and identify meaningful risk patterns, applies approved analytics, automation, and AI-enabled tools to work smarter, and helps build scalable audit practices that improve efficiency, insight, and risk coverage.

The ideal candidate demonstrates strong judgment, professional skepticism, leadership capability, business acumen, and readiness to grow in scope and influence.

The Internal Audit Manager is responsible for leading and executing risk-based internal audit activities that evaluate the effectiveness of governance, risk management, internal control, systems, data flows, and operational processes across the organization. This role manages audit engagements from planning through reporting, uses a data-first approach to test full populations and identify meaningful risk patterns, applies approved analytics, automation, and AI-enabled tools to work smarter, and helps build scalable audit practices that improve efficiency, insight, and risk coverage.

The ideal candidate demonstrates strong judgment, professional skepticism, leadership capability, business acumen, and readiness to grow in scope and influence.

• Lead complex risk-based audits from planning through reporting, aligned to Internal Audit methodology, professional standards, quality expectations, and enterprise risk priorities; design work programs, sequencing, staffing, documentation, and scalable approaches where practical.
• Lead risk anticipation and dynamic scoping across operational, financial, regulatory, technology, fraud, vendor, catastrophe, capacity, data-quality, automation, AI/model, and emerging risks; translate Citizens-specific context into audit coverage decisions and audit plan input.
• Build audit staff capability through coaching, review, cross-training, analytics adoption, engagement feedback, knowledge sharing, performance input, engagement-level evaluations, and modeling director-ready judgment, independence, and leadership behaviors.
• Lead data-first control evaluation and evidence assessment, including data availability, lineage, population definition, data reliability, full-population testing, systems/interface analysis, automated control testing, exception analysis, and issue development.
• Translate audit results for business unit, executive, and senior management; explain root cause, business impact, issue severity, practical action plans, and remediation status in clear, leadership-ready reports and discussions.
• Coordinate with Enterprise Risk, Internal Controls, Compliance, Inspector General, IT Security, Legal, external audit, and other assurance partners to promote comprehensive risk coverage, reduce duplication, support continuous assurance, and maintain effective collaborative assurance practices.
• Develop scalable audit execution practices, including reusable analytics, standardized work programs, common testing methods, continuous assurance routines, and repeatable approaches that improve audit coverage and reduce unnecessary rework.

• High School Diploma | GED
• Bachelor’s Degree OR 3 years relevant experience, OR a combination of college education and relevant experience equivalent to 3 years. (Accounting, Finance, Auditing, Risk Management, Business Administration, Property & Casualty Insurance, Information Systems, Data Analytics, or related field)

AND

• 7+ years of professional internal audit, risk, controls, public accounting, compliance, or relevant Property & Casualty insurance experience, including 3+ years leading audit engagements, supervising staff or project teams, and presenting results to senior management. Experience should include complex processes, financial, operational, technology, data analytics, or regulatory audits in a highly regulated…