Senior Manager IT Audit (m / f / d)

Riverty; Verl; Hybrid; EUR 70.000 - 90.000; Vollzeit

Zusammenfassung

A leading company in the financial sector is looking for an experienced IT Auditor to join their team. The role involves planning and conducting audits, ensuring compliance with security-related requirements, and providing insights to management. Candidates should have a background in IT security with certifications such as CISA or CISSP, and the ability to communicate in English, with German being a plus. Flexibility in work locations is available, with opportunities for national and international travel.

Qualifikationen

• 5+ years of experience in auditing or consulting in regulated industries.
• Excellent English skills; German a plus.
• Certifications such as CISA, CISM, and CISSP are highly advantageous.

Aufgaben

• Plan and conduct audits with a risk-based approach.
• Report audit results to management and ensure compliance.
• Coordinate and perform audit defense on external assessments.

Kenntnisse

Access Controls

API and Web Service Security

Cloud Security

Penetration Testing

Secure Communication

Ausbildung

Completed studies in Computer Science, IT Security, Information Security, Cyber Security, or related discipline

Tools

ISO 27001: 2022

ITIL

COBIT

Jobbeschreibung

unlimited, full-time) Join our team at our locations in Berlin, Verl, and Amsterdam – flexible working conditions available

What you bring to this position

• Completed studies in either Computer Science, IT Security, Information Security, Cyber Security, IT Governance / Management, or a related discipline.
• 5+ years of experience in auditing or consulting companies in regulated industries, ideally in the financial sector, focusing on IT / Tech.
• Specialized knowledge in Access Controls, API and Web Service Security, Configuration Management, Cloud Security, Authentication and Authorization, Secure Communication, and Penetration Testing.
• Best practices experience in end-to-end IT audits, including scoping, fieldwork, reporting, and follow-up activities, following a risk-based auditing, including control testing.
• Experience with standards such as ISO 27001 : 2022, BSI C5, ITIL, and COBIT is advantageous.
• You have excellent English language skills; German language skills are a big plus.
• Certifications such as CISA, CISM, CRISC, CISSP, Azure AZ / DP, or AWS “Certified” are highly advantageous.
• You are willing to travel nationally and internationally (up to 20%) when needed, while 80% working from home is possible.

What will be your challenge?

• Plan audits on a short-term, mid-term, and long-term risk-based approach.
• Conduct internal audits focused on tech areas within the regulated and non-regulated entities of Riverty.
• Coordinate audit requests and perform audit defense on external IT assessments in the second line of defense.
• Report directly to management about audit results and consolidate results to show trends to management.
• Discuss mitigating measures with the auditees and follow up on the mitigation plans in a planned manner.
• Ensure compliance with internal and external information security-related requirements, such as DORA, PCI-DSS, ISO 27001, or ISO 22301.
• Additionally, you will plan and execute third—and partly fourth-party audits in the context of the Digital Operational Resilience Act (DORA).