Job Description

Main purpose of job

To provide independent assurance over technology risks, IT governance and IT controls across Provident Europe and IPF Digital by planning and delivering risk-based IT internal audits, identifying control improvements and supporting the organisation in strengthening its technology control environment.

Key accountabilities

· Plan and deliver risk-based IT internal audits across Provident Europe and IPF Digital to provide independent assurance over the effectiveness of IT governance, IT risks and technology controls.

· Assess the design and operating effectiveness of IT General Controls, cybersecurity, cloud, third-party technology and technology governance processes to identify control weaknesses and opportunities for improvement.

· Prepare clear, evidence-based audit documentation, findings and reports to support management in implementing practical and sustainable control enhancements.

· Perform risk assessments and contribute to the annual audit planning process to ensure emerging technology risks and regulatory developments are appropriately reflected in the audit universe.

· Monitor and validate the implementation of agreed management actions to confirm that identified risks are adequately mitigated.

· Build effective working relationships with business and technology stakeholders across the Group to facilitate efficient audit delivery and promote a strong control culture.

· Maintain up-to-date knowledge of technology, cybersecurity, financial services regulations and industry best practices to ensure audit work remains relevant and aligned with evolving risks.

· Take ownership of assigned audit engagements, delivering high-quality outputs within agreed timelines while maintaining independence, objectivity and professional standards.

Knowledge, skills & experience:

• University degree in Information Technology, Computer Science, Information Systems, or another relevant discipline.
• Professional certifications such as CISA, CRISC, CISSP, CISM, or CIA represent an advantage.

• Good understanding of IT General Controls (ITGCs).
• Knowledge of IT governance frameworks and technology risk management.
• Understanding of cybersecurity principles and information security controls.
• Knowledge of cloud technologies and third-party technology risks.
• Understanding of financial services regulations affecting technology, including DORA and related ICT risk requirements.
• Strong stakeholder management and influencing skills.
• Ability to work independently in an international environment.
• 3–5 years' experience in IT Internal Audit, External IT Audit, IT Risk, IT Controls or IT Compliance.

• Experience within financial services is preferred.

• Experience working across multiple stakeholders and functions.

Essential Functional / Technical Skills:

· IT Internal Audit.

· IT General Controls (ITGC) testing.

· Technology risk assessment.

· Cybersecurity control assessment.

· IT governance reviews.

· Third-party and cloud risk assessments.

· Audit documentation and report writing.

· Regulatory compliance reviews.

· Data analytics and audit tools (advantage).

What’s in it for you?

• Annual bonus (depending on the business and individual performance)

• A medical subscription to one of our medical partners, Regina Maria or Medicover

• Meal vouchers of 30 lei per voucher

• Possibility to work in a hybrid system

• 21 days of vacation, plus 4 additional days of wellbeing

• Days off for seniority in the company

• A day off on your birthday

• Financial benefits for special events

• Discounts at various partners (Orange, Samsung, dental clinics, banking institutions)

• A welcoming and friendly office in the city center, near Parcul Tineretului

You will also enjoy personal and professional development programs:

• Induction program - 3 months of role-based learning, applied trainings and Buddy assigned for easy onboarding process

• Mentoring program - development sessions with relevant professionals in various areas of expertise

• Wellbeing program - networking and social events and actions

• Training and development opportunities - courses and learning opportunities on various topics through Provident Academy, technical trainings, talent growth and succession programs.