CISA Auditor, IT Processes – Banking

• Independently plan and conduct IT audits covering IT security, internal controls, identification and access rights, implementations, data migration, and IT governance
• Assess the security and control environment of information systems and IT governance
• Provide a complementary view to 1st- and 2nd-LoD assessments and monitor implementation of audit recommendations
• Prepare concise audit reports and present and discuss results with the Head of Internal Audit and, if necessary, the Audit Committee
• Collaborate on development of the annual audit plan
• Further develop IT audit methodology and improve audit efficiency and effectiveness using and implementing data analysis and AI tools
• Support innovative development of IT processes within the banking group
• Conduct occasional travel and situational ad hoc IT audits

• Bachelor’s or Master’s degree in Information Technology or Engineering
• CISA certification required
• CISSP, CISM, or CRISC certifications are a plus
• Professional experience in IT auditing at an international bank or as an IT auditor at a Big Four firm
• Knowledge of IT processes and internal controls at an international bank
• Knowledge of ISO 27001, COBIT, NIST, and similar frameworks and standards
• Knowledge of Windows environments, UNIX/Linux, databases, networks, and cloud architecture
• Knowledge of software development and ability to read scripting languages/code
• Knowledge of Swiss data protection law and implementation of FINMA circulars
• Analytical mindset and ability to work in a team and independently
• Ability to meet deadlines and stay within budget under time pressure
• Interest in ongoing collaborative dialogue with stakeholders across the banking group
• English and German language skills

Demonstrates expertise in IT auditing, including IT security, internal controls, and governance, while effectively utilizing data analysis and AI tools to enhance audit methodologies. Proficient in collaborating with stakeholders and preparing comprehensive audit reports in both English and German.

• CISA Certification
• IT Auditing Experience
• Knowledge of ISO 27001
• Knowledge of COBIT
• Analytical Mindset

• IT Security
• Internal Controls
• Data Migration
• IT Governance
• Scripting Languages
• Windows Environments
• UNIX/Linux
• Databases
• Networks
• Cloud Architecture

• Team Collaboration
• Deadline Management
• Stakeholder Engagement

• CISA
• CISSP
• CISM
• CRISC

• Swiss Data Protection Law
• FINMA Circulars
• International Banking
• Big Four Firms

• Data Analysis Tools
• AI Tools