Senior Manager IT Audit (m/f/d)

Bertelsmann; Deutschland; Hybrid; EUR 60.000 - 100.000; Vollzeit

Zusammenfassung

An established industry player is seeking a Senior Manager for IT Audit to join their dynamic team. This role involves conducting comprehensive audits in regulated sectors, focusing on IT security and governance. You will leverage your extensive experience to ensure compliance with critical standards and regulations while collaborating with various stakeholders. The position offers a flexible working environment, allowing for significant remote work, with opportunities for national and international travel. If you are passionate about enhancing IT security and compliance in a forward-thinking organization, this role is an exciting opportunity to make a meaningful impact.

Qualifikationen

• 5+ Jahre Erfahrung in der IT-Auditierung oder Beratung in regulierten Branchen.
• Spezialwissen in IT-Sicherheitspraktiken und Compliance-Standards.

Aufgaben

• Planung und Durchführung von internen Audits mit Fokus auf technische Bereiche.
• Berichterstattung über Audit-Ergebnisse und Trends an das Management.

Kenntnisse

IT Audit

IT Security

Cyber Security

Access Controls

API Security

Cloud Security

Penetration Testing

Risk Management

Ausbildung

Bachelor in Computer Science

Master in IT Security

Tools

ISO 27001

ITIL

COBIT

Jobbeschreibung

We are looking for a
Senior Manager IT Audit (m/f/d)
(unlimited, full-time) Join our team at our locations in Berlin, Verl, and Amsterdam - flexible working conditions available

What you bring to this position

• Completed studies in either Computer Science, IT Security, Information Security, Cyber Security, IT Governance/Management, or a related discipline.
• 5+ years of experience in auditing or consulting companies in regulated industries, ideally in the financial sector, focusing on IT/Tech.
• Specialized knowledge in Access Controls, API and Web Service Security, Configuration Management, Cloud Security, Authentication and Authorization, Secure Communication, and Penetration Testing.
• Best practices experience in end-to-end IT audits, including scoping, fieldwork, reporting, and follow-up activities, following a risk-based auditing, including control testing.
• Experience with standards such as ISO 27001:2022, BSI C5, ITIL, and COBIT is advantageous.
• You have excellent English language skills; German language skills are a big plus.
• Certifications such as CISA, CISM, CRISC, CISSP, Azure AZ/DP, or AWS "Certified" are highly advantageous.
• You are willing to travel nationally and internationally (up to 20%) when needed, while 80% working from home is possible.

What will be your challenge?

• Plan audits on a short-term, mid-term, and long-term risk-based approach.
• Conduct internal audits focused on tech areas within the regulated and non-regulated entities of Riverty.
• Coordinate audit requests and perform audit defense on external IT assessments in the second line of defense.
• Report directly to management about audit results and consolidate results to show trends to management.
• Discuss mitigating measures with the auditees and follow up on the mitigation plans in a planned manner.
• Ensure compliance with internal and external information security-related requirements, such as DORA, PCI-DSS, ISO 27001, or ISO 22301.
• Additionally, you will plan and execute third-and partly fourth-party audits in the context of the Digital Operational Resilience Act (DORA).

Date: May 6, 2025

Location: