IT) Audit Manager

Rotterdam As a Senior (IT) Audit Manager at Robeco, you lead end-to-end IT and operational audits, assess governance, risk and internal controls (SOx, data/IT risks), apply data-driven methods, evaluate AI impacts, and advise senior stakeholders across a global asset manager. Direct solliciteren Neem contact op, Role purpose: Lead and deliver risk-based IT and technology-enabled audits to evaluate governance, cybersecurity, IT controls, and regulatory compliance, while advising stakeholders on control improvements and risk mitigation., * Plan, scope, and execute IT audits (e.g., infrastructure, applications, cloud, cybersecurity, third parties) using a risk-based methodology.

• Assess design and operating effectiveness of IT general controls (access, change management, operations) and key automated controls.
• Evaluate technology risks, data integrity, privacy, resilience, and incident response capabilities.
• Lead audit teams, manage budgets and timelines, and ensure high-quality workpapers and evidence.
• Communicate findings, root causes, and practical remediation actions to senior leadership and audit committees.
• Partner with business and technology stakeholders to track remediation, validate fixes, and drive continuous control improvement.
• Contribute to the annual audit plan, risk assessment, and audit methodology enhancements., As a Senior (IT) Audit Manager within Robeco’s Internal Audit function, you play a key role in providing independent and objective assurance to the Executive Committee and the Audit & Risk Committee. Your work supports effective governance, risk management and internal control across a global asset management organization.

Internal Audit operates in a complex and international environment, covering a broad range of topics including operational processes, governance structures, SOx controls, IT and data risks, and the impact of emerging technologies such as AI. The team consists of 9 professionals and works across Robeco’s head office in Rotterdam and its international offices, combining close collaboration with clear individual accountability for audit quality and delivery., * Plan, execute, and report on IT and operational audit engagements and project reviews across Robeco’s global organization

• Deliver independent and objective assurance on governance, risk management, and internal control, contributing directly to strategic objectives
• Perform audits both independently and as part of a team, with end-to-end responsibility for your own audit assignments
• Assess risks and control environments, form well-reasoned judgments, and translate these into clear and actionable audit findings
• Maintain an active, constructive dialogue with senior stakeholders, offering insight, challenge, and advisory support
• Apply, and further develop, data-driven audit techniques and innovative audit approaches
• Assess the impact of AI and emerging technologies on internal controls and risk management
• Collaborate closely with other control functions, such as Risk Management, Compliance, and Legal Affairs
• Occasional travel to international offices for audit engagements

• Extensive experience in IT audit, technology risk, or internal audit within complex environments.
• Strong knowledge of frameworks and standards (e.g., COBIT, ITIL, NIST, ISO 27001, SOC 1/2) and regulatory expectations.
• Expertise in cybersecurity, cloud controls, identity and access management, and third-party risk.
• Ability to translate technical issues into business risk and actionable recommendations.
• Proven people leadership, stakeholder management, and report writing skills.
• Relevant certifications preferred (e.g., CISA, CISSP, CRISC, CPA)., * An academic degree in Information Technology, Economics, Business Administration or a related field, preferably complemented by a relevant professional qualification (RA, RO, RE, CIA, CISA or similar)
• 8+ years of experience in IT or operational auditing within a complex, regulated environment. Affinity with, and preferably experience in, asset management or the broader financial services industry
• Strong analytical and critical-thinking skills with sound professional judgement. Well-developed stakeholder management and communication skills.
• Interest in data-driven auditing and emerging technologies.
• Proficiency in English, both spoken and written
• Willingness to travel occasionally

• A challenging role within a global, professional Internal Audit function
• A wide variety of audit topics across a leading international asset manager
• Opportunities to further develop your professional expertise and influence organizational change
• A high degree of autonomy and responsibility within a supportive and collaborative team
• A flexible working environment with attention to work-life balance
• A culture built on integrity, independence, expertise, and continuous improvement