Senior IT Auditor (f/m/d) @ Group Internal Audit (Holding)

A1 Bulgaria; Wien; Remote; EUR 120,000 - 180,000; Full time

Job summary

A1 Bulgaria is seeking a senior IT Audit professional to lead the planning, execution and oversight of IT audits across the A1 group in a remote setup. You will review reports, ensure compliance with SOX, ISAE 3402, and SOC standards, and drive harmonization of audit tools and methodologies worldwide.

Fluency in English is required; German skills are a plus as the role interacts with international stakeholders. This position offers a virtual work environment and international exposure.

Qualifications

• 8+ years IT audit experience in multinational groups.
• Certified in IT risk and audit (CISA, CISSP, CISM or CIA).
• Strong knowledge of ITIL, COBIT and NIST frameworks.
• Experience with SOX, ISAE 3402 or SOC reporting.
• Excellent analytical, reporting and stakeholder skills.
• Fluent English; German business proficiency is a plus.

Responsibilities

• Lead, coordinate, and review IT audit planning for the group.
• Guide execution and reporting of IT audit engagements.
• Review IT audit reports for alignment with standards and regs.
• Oversee SOX testing design, implementation and operation.
• Develop and harmonize audit systems and tools.
• Improve group audit processes and IT risk universe.
• Perform in-depth risk analyses identifying critical assets and risks.
• Serve as liaison with senior stakeholders and external auditors.
• Drive knowledge sharing and competency uplift on audit topics.

Skills

IT audit

SOX testing

ISAE 3402

CISA

CISSP

CISM

CIA

IT governance frameworks

Stakeholder management

Education

Bachelor’s degree in IT, finance or accounting

Tools

Audit management tools

Job description

Group Internal Audit independently reviews and assesses the appropriateness and effectiveness of the Group's internal control system (ICS), risk management, and governance processes.

This role is open to all countries in our A1 footprint and will be operated in a virtual setup.

How Will You Make An Impact

• You lead, coordinate, and review the planning of IT audits for the whole A1 group, ensuring annual (local) audit plans are comprehensive, risk-based, and aligned across all entities.
• You guide and approve the execution and reporting of IT audit engagements like ad-hoc (incl. forensic), planned and follow-up audits.
• You review IT audit reports across all group entities, ensuring adherence to aligned methodology, regulatory obligations, and group standards.
• You oversee the evaluation of SOX management testing for effectiveness (design, implementation and operation) of group-level and local internal controls (e.g. ITGCs) and provide expert review and feedback on test documentation, audit evidence, and findings to ensure clarity, quality, and actionable recommendations.
• You facilitate the further development and harmonization of systems and toolsets used by internal audit group wide.
• You foster the enhancement of group audit processes, methodologies and the refinement of the IT audit universe, ensure implementation throughout the group and support local teams.
• You perform in-depth risk analyses, identifying group mission-critical assets and emerging risk areas.
• You serve as a key liaison with senior stakeholders, corporate functions, external auditors, and subsidiary audit heads to ensure continuous improvement and skills development.
• You drive group-wide knowledge sharing, learning solutions, and competency uplift on audit and IT risk topics.

What Makes You a Great Fit

• Extensive (8+ years) IT audit/internal audit experience in complex, multinational organizations, with group-wide oversight responsibilities.
• Highly recognized audit certifications (e.g. CISA, CISSP, CISM, CIA) and experience with SOX, ISAE 3402, SOC reporting, or equivalent regulations.
• Deep understanding of IT frameworks and standards (ITIL, COBIT, NIST, etc.) and up-to-date knowledge of current and emerging risks.
• Demonstrated expertise in audit methodology and managing multi-entity or cross-border audit programs.
• Strong analytical, report writing, and stakeholder management skills, regulatory awareness, and a solutions-oriented working style.
• Proven ability to drive alignment, improvement, and skills development across diverse audit teams and international stakeholders.
• Fluent English (C1+); willingness to improve or develop (if necessary) German skills for business communication.
• Collaborative, innovative, and ethical leader committed to delivering high-quality outcomes.

What We Offer

We build on our expertise with constant learning, offer an open environment for every individual and provide flexible working time and office arrangements.

We invite you to join us in this new world of work.