Internal Audit Manager - Senior IT

Achmea Internal Audit conducts audits and provides proactive research and advisory services to enhance Achmea’s risk management and internal control systems, contributing to strategic goals through transparency and collaboration., Role purpose: Lead and execute risk-based IT audits to evaluate technology controls, cybersecurity, and IT governance, providing independent assurance and actionable recommendations to strengthen the control environment. - Plan and deliver end-to-end IT audits (scoping, testing, reporting, and follow-up) aligned to the annual audit plan. - Assess IT general controls (access management, change management, operations, backups, incident/problem management) and application controls. - Evaluate cybersecurity controls, vulnerability management, identity and access management, and third-party/outsourcing risks. - Review technology governance, risk management, and compliance frameworks (e.g., ISO 27001, NIST, COBIT, ITIL) as applicable. - Partner with stakeholders to validate issues, agree remediation plans, and track corrective actions to closure. - Prepare clear audit reports for senior leadership and audit committee-level audiences. - Coach auditors, drive audit quality, and continuously

improve methodologies, analytics, and automation. Required qualifications and skills - Proven experience delivering IT audits, technology risk assessments, or cybersecurity assurance in complex environments. - Strong knowledge of ITGCs, SDLC controls, cloud controls, and third-party risk management. - Ability to translate technical findings into business risk and prioritized recommendations. - Excellent stakeholder management, communication, and report-writing skills. - Relevant certifications preferred: CISA, CISSP, CRISC, CIA, or equivalent. “Onze ambitie is om volledi…