Senior IT & Cybersecurity Auditor

Cyber StrategiX; Basel; Ibrido; CHF 140.000 - 190.000; Tempo pieno

Descrizione del lavoro

Cyber StrategiX in Basel is seeking an experienced Senior IT & Cybersecurity Auditor to strengthen governance, risk and controls across technology and security in an international financial services environment. You will own complex IT audit engagements, challenge practices and deliver independent insights to senior management.

You'll review cybersecurity, IT governance, infrastructure, access management and data protection, translating findings into actionable risk recommendations and

Competenze

• Degree in Computer Science, Information Technology, Information Systems or comparable discipline.
• At least 10 years of professional experience in IT, Cybersecurity, Information Security or related field.
• Strong knowledge of security domains: Network Security, IAM, Vulnerability Management, SOC, IT Resilience.
• Experience with security assessments, penetration tests and vulnerability scans.
• Professional certifications such as CISA, CISM or CISSP are advantageous.
• Interest in AI and AI governance for security and risk management.

Mansioni

• Plan, lead and deliver IT audit engagements based on risk, including audit strategies and testing procedures.
• Review technology-related risk areas such as cybersecurity, IT governance, infrastructure and data protection.
• Analyze complex IT architectures to identify weaknesses and assess security controls.
• Review findings from penetration tests and vulnerability scans and translate into risk insights.
• Assess emerging technologies, including AI, and their implications for governance and risk.
• Present audit findings and recommendations to senior management and executives.
• Prepare structured audit documentation and track remediation activities.
• Collaborate across IT, Cybersecurity, Risk Management and Governance to improve controls.

Conoscenze

Network Security

Identity and Access Management

Vulnerability Management

Security Operations

IT Resilience

Formazione

Bachelor's degree in Computer Science or related field

Strumenti

Penetration Testing Tools

Vulnerability Scanning Tools

Descrizione del lavoro

We are currently looking for an experienced Senior IT & Cybersecurity Auditor to join an international financial services environment and contribute to strengthening its technology, cybersecurity and risk management landscape.

In this role, you will combine your technical expertise with a strong understanding of governance, risk and controls. You will take ownership of complex audit engagements, challenge existing practices and provide independent insights that support informed decision-making at senior management level.

This is an excellent opportunity for a technically experienced professional who enjoys investigating complex IT environments, identifying potential vulnerabilities and making a meaningful impact on the organisation’s security and resilience.

Responsibilities & Tasks

• Plan, lead and deliver comprehensive IT audit engagements based on a risk-oriented approach, including the development of audit strategies and testing procedures.

• Review and evaluate technology-related risk areas, including cybersecurity, IT governance, infrastructure, network security, access management, data protection, operational resilience and emerging technologies.

• Apply your technical background to analyse complex IT architectures, identify potential weaknesses and assess the effectiveness of existing security measures and internal controls.

• Review findings from penetration tests, vulnerability scans, security assessments and monitoring activities, translating technical observations into relevant risk insights.

• Assess emerging technologies, particularly Artificial Intelligence and AI-driven solutions, and evaluate their implications for cybersecurity, governance and technology risk.

• Present audit findings, recommendations and risk assessments to relevant stakeholders, including senior management and executive-level decision-makers.

• Prepare structured and impactful audit documentation, ensuring that identified issues are clearly communicated and actionable.

• Track remediation activities and evaluate the effectiveness of implemented measures.

• Work closely with colleagues across IT, Cybersecurity, Risk Management, Governance and Business functions to promote continuous improvement and strengthen the overall control environment.

Requirements & Qualifications

• Degree in Computer Science, Information Technology, Information Systems or a comparable discipline, alternatively equivalent professional experience.

• At least 10 years of relevant professional experience in IT, Cybersecurity, Information Security, Technology Risk or a related technical field.

• Strong practical knowledge of several core technology and security domains, such as Network Security, Identity and Access Management, Vulnerability Management, Security Operations or IT Resilience.

• Experience working with technical security assessments, penetration testing results, vulnerability scanning solutions or comparable security tools.

• Previous exposure to IT Audit, Internal Audit, External Audit, Technology Risk or another assurance-related function is highly desirable.

• Professional certifications such as CISA, CISM, CISSP or equivalent qualifications are considered an advantage.

• Interest in Artificial Intelligence, machine learning and AI-driven technologies, particularly in relation to security, governance and risk management. Practical experience in AI governance or AI-based solutions is beneficial.

• Strong analytical capabilities, a structured approach to problem-solving and the ability to assess complex technical information independently.

• Excellent communication and stakeholder management skills, with the confidence to challenge established practices constructively and engage with senior decision-makers.

• High professional integrity, sound judgement and a strong sense of responsibility.

• Fluent English is required. German and/or French language skills are an additional advantage.

• Willingness to undertake international business travel, approximately 20 days or more annually.

Benefits & Culture

• Work in an international financial services environment where technology, security and risk management play a central role.

• Take on a highly visible position with direct exposure to senior stakeholders and strategic decision-making.

• Enjoy a broad and varied scope of responsibility across technology, cybersecurity and emerging risk areas.

• Collaborate with experienced professionals from IT, Business, Risk and Governance in a supportive and knowledge-driven environment.

• Benefit from opportunities for continuous professional development, specialist training and relevant industry certifications.

• Contribute to meaningful initiatives that strengthen organisational security, resilience and governance.

• Join a professional culture that values integrity, initiative, collaboration and individual expertise.