IT Auditor – Operations

• Lead audits or support IT audit colleagues in Cyber and IT Operational Risk, including IT Business Continuity Management, from planning through to drafting the audit report
• Monitor risks and perform detailed risk analyses including risk assessments
• Conduct continuous risk-monitoring activities
• Collaborate with the Data Analytics team to produce high-quality findings within set time frames
• Report benchmarking of risks and controls
• Identify emerging risks and threats, including escalation to senior management
• Support development of the annual audit plan with Senior IT Management and the Head of Internal IT Audit
• Coach and mentor junior audit colleagues
• Build strong relationships with Senior IT Management and promote risk-awareness flexibility
• Collaborate with external auditors
• Perform ad-hoc IT audits

• Bachelor’s or Master’s degree in Business/Economics, Computer Science, or Engineering
• Professional certification such as CPA, CIA, or CISA, CISM, CISSP
• Professional experience in banking or IT audit covering cyber, IT infrastructure, and general IT controls
• Strong understanding of IT infrastructure and expertise in designing and structuring risk and cyber controls
• Experience in IT Operational Risk and IT Business Continuity
• Interest in specialist topics such as IT Business Risk, IT Business Continuity, Threat Detection & Response, I&AM, and DLP
• Experience with CISO, NIST, COBIT and other IT control frameworks and Second Line of Defense
• Solid knowledge of IT governance and IT risk management
• Skilled communicator with stakeholders at various hierarchical levels
• Ability to explain technical matters simply and concisely
• German and English

Demonstrates expertise in IT Audit, Cyber Risk Management, and IT Business Continuity, with a strong ability to conduct risk assessments and collaborate effectively with stakeholders. Proficient in IT governance frameworks and skilled in mentoring junior colleagues while promoting risk awareness.

• IT Audit Leadership
• Risk Assessment Expertise
• Cyber Risk Management
• Professional Certification (CPA, CIA, CISA, CISM, CISSP)
• IT Governance Knowledge

• Risk Analysis
• IT Business Continuity Management
• IT Operational Risk
• IT Infrastructure Understanding
• Threat Detection & Response
• I&AM
• DLP
• NIST Framework
• COBIT Framework
• IT Controls Design

• Skilled Communicator
• Mentoring
• Relationship Building
• Flexibility
• Technical Explanation

• CPA
• CIA
• CISA
• CISM
• CISSP

• Banking
• IT Audit
• Cyber Controls
• Second Line of Defense
• IT Governance
• IT Risk Management