Senior IT & Cybersecurity Auditor

Cyber StrategiX; Basel; On-site; CHF 140,000 - 200,000; Full time

Benefits offered by this job

International environment

Senior stakeholder exposure

Professional development

Job summary

Cyber StrategiX in Basel seeks an experienced Senior IT & Cybersecurity Auditor to strengthen technology risk and governance. You will own complex audit engagements, challenge practices, and provide independent insights to senior management.

You will review cybersecurity, IT governance, infrastructure, access management and data protection, assess AI and AI-driven solutions, and report findings with actionable remediation steps.

Qualifications

• Degree in Computer Science, Information Technology, Information Systems or a comparable discipline, alternatively equivalent professional experience.
• At least 10 years of relevant professional experience in IT, Cybersecurity, Information Security, Technology Risk or a related technical field.
• Strong practical knowledge of core technology and security domains: Network Security, IAM, Vulnerability Management, Security Operations, IT Resilience.
• Experience with technical security assessments, penetration testing results, vulnerability scanning solutions or similar tools.
• Prior exposure to IT Audit, Internal Audit, External Audit, Technology Risk or related assurance function is desirable.
• CISA, CISM, CISSP or equivalent qualifications are advantageous.
• Interest in AI and AI governance; practical experience in AI governance or AI-based solutions is beneficial.
• Strong analytical, structured problem-solving abilities and independence in assessing complex technical information.
• Excellent communication and stakeholder management skills; confident in engaging senior decision-makers.
• High integrity and responsibility.
• Fluent English; German and/or French is a plus.
• Willingness to travel internationally (~20+ days/year).

Responsibilities

• Plan, lead and deliver IT audit engagements based on a risk-oriented approach, including audit strategies and testing procedures.
• Review and evaluate technology-related risk areas such as cybersecurity, IT governance, infrastructure, network security, access management, data protection, operational resilience and emerging technologies.
• Analyze complex IT architectures to identify weaknesses and assess effectiveness of security measures and internal controls.
• Review findings from penetration tests, vulnerability scans and security assessments and translate observations into risk insights.
• Assess AI and AI-driven technologies and their implications for cybersecurity, governance and risk management.
• Present audit findings, recommendations and risk assessments to senior management and executives.
• Prepare structured audit documentation with actionable issues and remediation steps.
• Track remediation activities and evaluate effectiveness of implemented measures.
• Collaborate with IT, Cybersecurity, Risk Management, Governance and Business functions to drive continuous improvement.

Skills

IT Audit

Cybersecurity

Governance & Risk

Information Security

Internal Controls

Education

Degree in Computer Science / Information Technology or equivalent

Tools

Vulnerability Scanning

Security Assessments

Job description

We are currently looking for an experienced Senior IT & Cybersecurity Auditor to join an international financial services environment and contribute to strengthening its technology, cybersecurity and risk management landscape.

In this role, you will combine your technical expertise with a strong understanding of governance, risk and controls. You will take ownership of complex audit engagements, challenge existing practices and provide independent insights that support informed decision-making at senior management level.

This is an excellent opportunity for a technically experienced professional who enjoys investigating complex IT environments, identifying potential vulnerabilities and making a meaningful impact on the organisation’s security and resilience.

Responsibilities & Tasks

• Plan, lead and deliver comprehensive IT audit engagements based on a risk-oriented approach, including the development of audit strategies and testing procedures.

• Review and evaluate technology-related risk areas, including cybersecurity, IT governance, infrastructure, network security, access management, data protection, operational resilience and emerging technologies.

• Apply your technical background to analyse complex IT architectures, identify potential weaknesses and assess the effectiveness of existing security measures and internal controls.

• Review findings from penetration tests, vulnerability scans, security assessments and monitoring activities, translating technical observations into relevant risk insights.

• Assess emerging technologies, particularly Artificial Intelligence and AI-driven solutions, and evaluate their implications for cybersecurity, governance and technology risk.

• Present audit findings, recommendations and risk assessments to relevant stakeholders, including senior management and executive-level decision-makers.

• Prepare structured and impactful audit documentation, ensuring that identified issues are clearly communicated and actionable.

• Track remediation activities and evaluate the effectiveness of implemented measures.

• Work closely with colleagues across IT, Cybersecurity, Risk Management, Governance and Business functions to promote continuous improvement and strengthen the overall control environment.

Requirements & Qualifications

• Degree in Computer Science, Information Technology, Information Systems or a comparable discipline, alternatively equivalent professional experience.

• At least 10 years of relevant professional experience in IT, Cybersecurity, Information Security, Technology Risk or a related technical field.

• Strong practical knowledge of several core technology and security domains, such as Network Security, Identity and Access Management, Vulnerability Management, Security Operations or IT Resilience.

• Experience working with technical security assessments, penetration testing results, vulnerability scanning solutions or comparable security tools.

• Previous exposure to IT Audit, Internal Audit, External Audit, Technology Risk or another assurance-related function is highly desirable.

• Professional certifications such as CISA, CISM, CISSP or equivalent qualifications are considered an advantage.

• Interest in Artificial Intelligence, machine learning and AI-driven technologies, particularly in relation to security, governance and risk management. Practical experience in AI governance or AI-based solutions is beneficial.

• Strong analytical capabilities, a structured approach to problem-solving and the ability to assess complex technical information independently.

• Excellent communication and stakeholder management skills, with the confidence to challenge established practices constructively and engage with senior decision-makers.

• High professional integrity, sound judgement and a strong sense of responsibility.

• Fluent English is required. German and/or French language skills are an additional advantage.

• Willingness to undertake international business travel, approximately 20 days or more annually.

Benefits & Culture

• Work in an international financial services environment where technology, security and risk management play a central role.

• Take on a highly visible position with direct exposure to senior stakeholders and strategic decision-making.

• Enjoy a broad and varied scope of responsibility across technology, cybersecurity and emerging risk areas.

• Collaborate with experienced professionals from IT, Business, Risk and Governance in a supportive and knowledge-driven environment.

• Benefit from opportunities for continuous professional development, specialist training and relevant industry certifications.

• Contribute to meaningful initiatives that strengthen organisational security, resilience and governance.

• Join a professional culture that values integrity, initiative, collaboration and individual expertise.