IT Audit Manager

Role Overview

We are looking to hire an IT Audit Manager who will lead IT audit projects, evaluating risk and controls to ensure adherence to both headquarters' compliance standards and local regulatory requirements. This role involves designing audit plans, analyzing data and processes, and producing insightful recommendations that drive operational improvements. Beyond conducting audits, you will collaborate with various teams to enhance controls, refine processes, and implement industry best practices within a dynamic and evolving IT risk environment.

Key Responsibilities

• Manage and execute the IT audit program focused on risk and control oversight to guarantee operational efficacy, system reliability, and compliance with relevant internal policies and regulations.
• Assist in defining the internal audit scope and contribute to formulating annual audit plans.
• Examine and assess documentation, reporting, data flows, and processes in critical IT domains such as system development, IT security, and IT operations.
• Compile comprehensive internal audit reports, providing clear and actionable recommendations.
• Ensure auditing activities are aligned with professional standards and regulatory requirements.

Candidate Profile

• Experience as an Internal IT Auditor within international organizations regulated under stringent environments, preferably banking or financial institutions.
• Proven ability to plan, execute, and document audit engagements including risk evaluations, control testing (both design and operating effectiveness), reporting outcomes, and tracking remediation efforts.
• Familiarity with IT infrastructure audits encompassing contemporary AI systems and third-party service dependencies.
• Expertise in data-centric audit methods, such as SQL queries and large dataset analyses, supporting audit validations and control reviews.
• Sound knowledge of European financial regulatory frameworks applicable to IT and digital services, including DORA, EBA guidelines, and national supervisory expectations like MaRisk/BAIT.
• Insight into banking regulatory law and supervisory systems, with a readiness to gain proficiency in local regulations and IT systems relevant to banking.
• Possession of relevant certifications such as CIA, CFA, FRM, or CQF is desirable.

Necessary Skills

• Comprehensive understanding of auditing standards and frameworks.
• Advanced knowledge of IT General Controls (ITGC) and ICT third-party risk management, including outsourcing governance and supplier risk evaluations.
• Thorough grasp of IT governance, IT audit norms, ICT risk oversight, and operational resilience.
• Proficient in English; German language skills are advantageous.
• Exemplary integrity, independence, and professional skepticism.
• Analytical aptitude combined with problem-solving capabilities to assess sophisticated IT environments.
• Strategic thinking with strong business insight and meticulous attention to detail.
• Outstanding communication and stakeholder engagement skills with both technical and non-technical audiences.
• Curiosity, strong attention to detail, and a commitment to ongoing professional development.
• Expertise with audit tools, data analytics, SQL, and reporting systems.
• Well-versed in controls, risk management, and process enhancement techniques.
• Competent in project management, aligning stakeholders, and facilitating actionable audit results.