Group IT Senior Internal Auditor

MAIRE S.p.A.  is a leading engineering group providing technology solutions and project execution in the downstream segment of energy services, as well as in the chemicals and fertilizers industries. The Group operates through two business units:
Integrated E&C Solutions and Sustainable Technology Solutions, the latter active in sustainable fertilizers, low carbon energy vectors, and innovative materials and circular solutions. With operations in around 50 countries, MAIRE employs approximately 10,800 people.
MAIRE S.p.A. is seeking a  Group IT Senior Internal Auditor  to join the Group Internal Audit Function.

Sta pensando di candidarsi per questo lavoro? Verifichi tutti i dettagli nella descrizione e poi faccia clic su "Candidati".

As part of the Function, the Group IT Senior Internal Auditor contributes to the independent evaluation of the Group’s IT governance, risk management, and control framework across a complex and international environment. The role supports the organization in managing technology-related risks by assessing systems, infrastructure, and digital processes, while promoting best practices in cybersecurity, data governance, and regulatory compliance. The position requires strong business acumen and the ability to translate complex technical risks into clear insights for senior management and stakeholders, to help strengthen decision-making, and ensure IT capabilities effectively support the Group’s strategic objectives and operational excellence.

Key Responsibilities
Execute IT audit engagements in strict coordination with the senior roles and in accordance with the International Professional Practices Framework of the Institute of Internal Auditors and with the Group Document Management System;
Guarantee the timely and accurate completion of the assigned activity;
Analyze policies, procedures, organizational chart and the Group Document Management System, to develop a thorough understanding of business processes in scope for assigned engagements (e.g., cybersecurity, access management, change management, data integrity, and incident response);
Identify main key controls to prevent major business risks;
Prepare and execute work programs to evaluate the design and the implementation of controls over the processes under review;
Assess IT governance frameworks and ensure alignment with business objectives, industry standards and regulatory requirements (e.g., Directive NIS2, AI Act, ISO/IEC 27001:2022, NIST Cybersecurity Framework, COBIT);
Support the execution of the IT General Controls (ITGCs) and application controls;
Participate in developing internal audit reports, identifying observations and suitable recommendations;
Execute, in close coordination with the senior roles and the Responsible, follow-up audits to monitor management’s interventions, where necessary;
Stay continuously updated on relevant topics to ensure effective execution of assigned responsibilities;
Contribute to the evolution of the audit approach, supporting the development of data analytics, automation tools and continuous auditing procedures.

Key Requirements & Skills
Bachelor’s or Master’s degree in Information Technology, Computer Science, Engineering, Business Administration or any related field;
7+ years of experience in IT audit, IT risk consulting, cybersecurity or similar roles;
Strong knowledge of IT General Controls (ITGCs) and application controls, IT risk management and cybersecurity processes;
Good knowledge of key IT and information security regulations and frameworks, such as Directive NIS2, AI Act, ISO/IEC 27001:2022, NIST Cybersecurity Framework, and COBIT;
Advanced analytical skills and problem-solving capability;
Knowledge of CAATs / data analytics tools (e.g., ACL, SQL, advanced Excel)…