Senior IT Auditor - Cybersecurity & Tech Risk

J. Safra Sarasin; Basel; On-site; CHF 120,000 - 160,000; Full time

Benefits offered by this job

Insurance coverage

Meal allowance

Health plan

Job summary

J. Safra Sarasin is seeking an experienced IT Auditor to assess technology and cybersecurity across our private banking operations. You will plan and execute risk-based IT audit assignments focused on IT, Cybersecurity, and emerging technology risks.

You will analyze results from penetration tests and vulnerability assessments, communicate findings to senior management, and monitor action plans. The role requires collaboration with IT, Risk, and Cybersecurity teams and travel roughly 20+ days

Qualifications

• Higher education in IT/CS or related field with 10+ years in IT, cybersecurity or risk.
• Hands-on experience in Cybersecurity, IT Risk, IT Operations and IAM.
• Proven expertise in analysing results from security tests and assessments.
• Prev. experience in IT Audit or Technology Risk is a plus.
• Strong ethics, communication, and stakeholder management.

Responsibilities

• Design and execute risk-based IT audit programs.
• Assess Cybersecurity, IT Risk, Identity & Access Management and Network Security.
• Interpret penetration testing and vulnerability results and report findings.
• Keep abreast of AI, cybersecurity developments and their impact on the Bank.
• Communicate audit outcomes to management and track corrective actions.
• Collaborate with IT Auditors, IT Management and Risk teams.

Skills

IT Audit

Cybersecurity

Vulnerability Mgmt

Penetration Testing

Threat Modelling

IT Risk

Audit Reporting

Education

CS/IT Degree

CISA

CISM

CISSP

Tools

Nessus

Qualys

SIEM

Job description

J. Safra Sarasin is seeking an experienced IT Auditor to assess technology and cybersecurity across our private banking operations. You will plan and execute risk-based IT audit assignments focused on IT, Cybersecurity, and emerging technology risks.

You will analyze results from penetration tests and vulnerability assessments, communicate findings to senior management, and monitor action plans. The role requires collaboration with IT, Risk, and Cybersecurity teams and travel roughly 20+ days