Senior Technology & Cybersecurity Auditor

Our client is a well-established financial institution known for its long-standing stability, international footprint, and commitment to operational excellence.

The organisation operates in a highly regulated environment and places strong emphasis on robust governance, information security, technology resilience and effective risk management. Its international setup provides exposure to complex technology environments, evolving cybersecurity risks and strategic transformation initiatives.

As Senior Technology & Cybersecurity Auditor, you will independently assess and challenge complex technology and cybersecurity environments within an international financial institution.

Working at the intersection of Technology, Cybersecurity, Risk, Governance and Business, you will conduct risk-based audits covering critical IT and security domains while leveraging your own hands-on technical background to identify material risks and control weaknesses. You will interact with senior management and technical specialists and provide independent, practical and trusted assurance on existing as well as emerging technology risks.

• Plan and independently execute risk-based technology and cybersecurity audits from scoping through reporting and follow-up
• Assess the effectiveness of controls across Cybersecurity, IT Risk, IT Operations, Identity & Access Management, Network Security, Data Management and IT Resilience
• Apply hands-on technical expertise to evaluate complex IT environments and identify material technology risks and control weaknesses
• Analyse and challenge findings from penetration testing, vulnerability assessments, security monitoring and other technical security reviews
• Assess the security and governance implications of emerging technologies, including Artificial Intelligence and AI-enabled solutions
• Evaluate technology resilience, operational security and risk management practices across critical systems and infrastructure
• Communicate audit findings and recommendations to technology management, senior leadership and other key stakeholders
• Prepare clear, concise and impactful audit reports and monitor the implementation of agreed remediation measures
• Collaborate with Technology, Cybersecurity, Risk Management and Audit teams to strengthen the organisation's overall governance and control environment
• Maintain awareness of evolving cybersecurity threats, technology developments and regulatory expectations

You hold a university-level qualification in Computer Science, Information Technology, Information Systems, Cybersecurity or a comparable technical discipline, or bring equivalent professional expertise. You have a substantial hands-on technology background and the ability to independently assess complex technical environments from a risk and control perspective.

Additionally:

• Minimum 10 years of practical professional experience within IT, Cybersecurity, Information Security, Technology Risk or closely related technical disciplines
• Strong hands-on experience in one or more core security domains such as Cybersecurity, Network Security, Identity & Access Management, Vulnerability Management, Security Operations or IT Resilience
• Proven ability to analyse and interpret penetration testing results, vulnerability scans, technical security assessments and security monitoring findings
• Strong understanding of technology risks, technical controls and modern enterprise IT environments
• Previous experience in IT Audit, Internal Audit, External Audit, Technology Risk or another assurance function is highly advantageous
• Professional certifications such as CISA, CISM, CISSP or comparable technology/security qualifications are strongly preferred
• Genuine interest and practical understanding of Artificial Intelligence and its implications for Cybersecurity, Technology Risk and Governance
• Experience with AI, AI Agents, Machine Learning, AI Security or AI Governance is considered a strong advantage
• Excellent analytical and problem-solving capabilities combined with the ability to challenge technical and senior stakeholders constructively
• Strong written communication and presentation skills, including the ability to translate complex technical findings into clear business-relevant risks and recommendations
• High level of professional integrity, independence, ownership and accountability
• Willingness to travel internationally approximately 20 or more days per year
• Fluent in English;
  German…