IT Auditor

J. Safra Sarasin; Basel; On-site; CHF 120,000 - 160,000; Full time

Benefits offered by this job

Insurance coverage

Meal allowance

Health plan

Job summary

J. Safra Sarasin is seeking an experienced IT Auditor to assess technology and cybersecurity across our private banking operations. You will plan and execute risk-based IT audit assignments focused on IT, Cybersecurity, and emerging technology risks.

You will analyze results from penetration tests and vulnerability assessments, communicate findings to senior management, and monitor action plans. The role requires collaboration with IT, Risk, and Cybersecurity teams and travel roughly 20+ days

Qualifications

• Higher education in IT/CS or related field with 10+ years in IT, cybersecurity or risk.
• Hands-on experience in Cybersecurity, IT Risk, IT Operations and IAM.
• Proven expertise in analysing results from security tests and assessments.
• Prev. experience in IT Audit or Technology Risk is a plus.
• Strong ethics, communication, and stakeholder management.

Responsibilities

• Design and execute risk-based IT audit programs.
• Assess Cybersecurity, IT Risk, Identity & Access Management and Network Security.
• Interpret penetration testing and vulnerability results and report findings.
• Keep abreast of AI, cybersecurity developments and their impact on the Bank.
• Communicate audit outcomes to management and track corrective actions.
• Collaborate with IT Auditors, IT Management and Risk teams.

Skills

IT Audit

Cybersecurity

Vulnerability Mgmt

Penetration Testing

Threat Modelling

IT Risk

Audit Reporting

Education

CS/IT Degree

CISA

CISM

CISSP

Tools

Nessus

Qualys

SIEM

Job description

As IT Auditor at Bank J. Safra Sarasin youwill play an important role in assessing and challenging the technology and cybersecurity landscape of our international private bank. Working at the intersection of Technology, Cybersecurity, Risk, Governance and Business, you will independently plan and execute complex, risk-based audit assignments with a primary focus on IT, Cybersecurity, and emerging technology risks.You will utilize your technology expertise to evaluate control effectiveness and provide high-value, independent and trusted guidance to senior management and key stakeholders, including C-Level representatives while maintaining the independence and objectivity expected from Internal Audit.

Your Responsibilities

• Design and execute risk-based IT audit assignments and audit programs
• Assess and challenge areas such as Cybersecurity, IT Risk, IT Operations, Identity & Access Management, Network Security, Data Management, IT Resilience and emerging technologies including AI
• Leverage your hands-on technical experience to understand complex technology environments and identify material risks and control weaknesses
• Analyse and assess results from penetration testing, vulnerability assessments, security monitoring and other technical security assessments
• Keep abreast of emerging technology and cybersecurity developments and assess their potential impact on the Bank
• Communicate audit results effectively to management and key stakeholders
• Draft clear, concise and meaningful audit reports and monitor the implementation of agreed management actions
• Collaborate closely with IT Auditors, Business Auditors, IT Management, Cybersecurity, Risk and other internal stakeholders to strengthen the overall control environment

Your Profile

• Higher education (university / FH) inComputer Science, Information Technology, Information Systems or a related field, or equivalent professional experience,with 10 years of practical experience in IT, Cybersecurity, Information Security, Technology Risk or a related field
• Practical hands-on experience in core domains such as Cybersecurity, Network Security, Identity & Access Management, Vulnerability Management, IT Resilience or Security Operations
• Proven expertise in analysing results from penetration testing tools, vulnerability scanners, security assessments or other technical security tools
• Previous experience in IT Audit, Internal Audit, External Audit, Technology Risk or a comparable assurance function is an advantage
• Relevant professional certifications such asCISA, CISM, CISSP or equivalent are preferred
• A genuine interest in Artificial Intelligence and its implications for Cybersecurity, Technology Risk, and Governance; experience with AI, AI Agents, machine learning or AI governance is a strong advantage
• Willingness to travel internationally, approximately 20+ days per year
• Strong professional ethics, integrity, and a high level of personal accountability
• Excellent analytical and problem-solving skills
• Proficient communication and presentation skills paired with strong interpersonal and stakeholder management skills, demonstrating the ability to challenge constructively, and communicate effectively with various stakeholders
• Fluency in English; fluency in German and/or French is a plus
• Entrepreneurial spirit in a family owned bank
• Central city office locations across Switzerland
• Above average insurance coverage fully borne by the bank
• Contribution to health insurance and meal allowance
• Global growth strategy and stable environment
• Competitive offering

About us

As a leading sustainable private bank, we offer dynamic and personalized services in investment advisory and asset management for private and institutional clients.Our success depends on the enthusiasm and commitment of our employees and we value each person with their unique technical expertise, professional qualifications and social skills.

We are successfully operating for more than 180 years across 30 locations worldwide and offer our employees the chance to be a part of our success.Our employees are our most valuable asset, we are proud of our unique culture that fosters entrepreneurship and is fueled by a high team spirit andthe positive attitude of each individual. Join our international team and be part of the next chapter of the J. Safra Sarasin Group.