Job Description

Your area of work

In your new position you will assume responsibility for planning and execution of risk-oriented IT audits with respect to compliance, security and efficiency of systems and processes. Your analysis and evaluation of the areas examined the identification of deficiencies within the internal control system as well as the successful implementation of your recommendations will contribute to improving the company's risk exposure. You will additionally bring a cyber security perspective to audit work, helping to identify and assess cyber-related risks across the organisation's technology landscape.

We are looking for a self-starting team player who can convince with enthusiasm and curiosity to understand and challenge a fast-paced, leading-edge technology environment. Experience and pragmatism in daily audit business, as well as an open mind for change and development, is completing your personal profile.

Your responsibilities

• Support in planning and structuring of IT audit areas and their risk assessment, including the assessment of cyber security risks
• Independent preparation and execution of IT audits as well as participating in IT audits, with a focus on security controls and cyber resilience where applicable
• Identification of deficiencies and improvement opportunities — including vulnerabilities in cyber security controls — as well as development of pragmatic approaches to solve problems
• Assistance with creation of audit reports and communication of results to responsible line management in the audited areas
• Active participation in shaping the audit methodology and processes as well as support of risk-based audit planning, incorporating cyber security frameworks and threat intelligence where relevant
• Consultation and support of general audits and potentially independent planning and execution of those audits
• Audit related consulting and support to business units, including guidance on cyber security best practices and control effectiveness
• Follow-up of audits and derived recommendations and support of IT projects from an audit and cyber security perspective

Your profile

• Bachelor's or master's degree, preferably in computer science, AI, data analytics, cyber security, or equivalent
• Must have 3+ years of professional experience in Internal Audit in EU financial services
• Strong knowledge of the financial sector; knowledge of clearing processes is an advantage
• Hands-on experience in the management of audits, preferably in the banking sector; alternatively, operational experience in IT or cyber security
• Practical experience in cyber security, such as vulnerability assessment, penetration testing concepts, security operations, incident response, and related tooling
• Experience and knowledge in using AI and data analytics in an audit context are beneficial
• Preferably, you hold professional certifications, e.g. CIA, CISA, CISSP, CISM, or CEH, and have knowledge of established IT and security regulations and standards such as DORA, ITIL, COBIT, BSI IT-Grundschutz, ISO 27001, and NIST CSF
• Experience and knowledge in project management, data analytics, and audit software
• High analytical skills, quick conceptual understanding of complex matters and thinking outside the box
• Initiative, autonomous and goal-oriented working style, paired with strong interpersonal skills, clear communication, organisational talent, and ability to work under pressure
• High level of proficiency in written and spoken English; German is a plus