IT Auditor (f/m/d)

Darum lohnt es sich

You will additionally bring a cyber security perspective to audit work, helping to identify and assess cyber-related risks across the organisation's technology landscape.We are looking for a self-starting team player who can convince with enthusiasm and curiosity to understand and challenge a fast-paced, leading-edge technology environment.

Your area of workIn your new position you will assume responsibility for planning and execution of risk-oriented IT audits with respect to compliance, security and efficiency of systems and processes.

Your analysis and evaluation of the areas examined the identification of deficiencies within the internal control system as well as the successful implementation of your recommendations will contribute to improving the company's risk exposure.

Experience and pragmatism in daily audit business, as well as an open mind for change and development, is completing your personal profile.

Your responsibilities Support in planning and structuring of IT audit areas and their risk assessment, including the assessment of cyber security risksIndependent preparation and execution of IT audits as well as participating in IT audits, with a focus on security controls and cyber resilience where applicableIdentification of deficiencies and improvement opportunities — including vulnerabilities in cyber security controls — as well as development of pragmatic approaches to solve problemsAssistance with creation of audit reports and communication of results to responsible line management in the audited areasActive participation in shaping the audit methodology and processes as well as support of risk-based audit planning, incorporating cyber security frameworks and threat intelligence where relevantConsultation and support of general audits and potentially independent planning and execution of those auditsAudit related consulting and support to business units, including guidance on cyber security best practices and control effectivenessFollow-up of audits and derived recommendations and support of IT projects from an audit and cyber security perspectiveYour profileBachelor's or master's degree, preferably in computer science, AI, data analytics, cyber security, or equivalentMust have 3+ years of professional experience in Internal Audit in EU financial servicesStrong knowledge of the financial sector; knowledge of clearing processes is an advantageHands-on experience in the management of audits, preferably in the banking sector; alternatively, operational experience in IT or cyber securityPractical experience in cyber security, such as vulnerability assessment, penetration testing concepts, security operations, incident response, and related toolingExperience and knowledge in using AI and data analytics in an audit context are beneficialPreferably, you hold professional certifications, e.g.

CIA, CISA, CISSP, CISM, or CEH, and have knowledge of established IT and security regulations and standards such as DORA, ITIL, COBIT, BSI IT-Grundschutz, ISO 27001, and NIST CSFExperience and knowledge in project management, data analytics, and audit softwareHigh analytical skills, quick conceptual understanding of complex matters and thinking outside the boxInitiative, autonomous and goal-oriented working style, paired with strong interpersonal skills, clear communication, organisational talent, and ability to work under pressureHigh level of proficiency in written and spoken English; German is a plus