Senior Manager IT Audit (m / f / d)

Bertelsmann SE & Co. KGaA; Nordrhein-Westfalen; Hybrid; EUR 60.000 - 100.000; Vollzeit

Zusammenfassung

An established industry player is seeking an IT Audit Manager to join their dynamic team across multiple locations in Europe. This role offers the flexibility of working from home while engaging in critical audits within regulated industries. You will leverage your extensive knowledge in IT Security and Compliance to ensure adherence to standards like ISO 27001 and DORA. The ideal candidate will have over 5 years of experience in IT auditing, with a strong focus on risk-based approaches. If you are passionate about ensuring information security and compliance, this is an exciting opportunity to make a significant impact in a forward-thinking environment.

Qualifikationen

• 5+ years of experience in auditing or consulting in regulated industries.
• Specialized knowledge in IT Security and Compliance standards.
• Certifications like CISA, CISM, and CISSP are highly advantageous.

Aufgaben

• Planning audits based on risk-based approaches.
• Conducting internal audits focused on technical areas.
• Reporting audit results directly to management and identifying trends.

Kenntnisse

IT Auditing

Access Controls

API Security

Web Service Security

Cloud Security

Penetration Testing

Risk-Based Approaches

IT Governance

Information Security

Ausbildung

Bachelor's in Computer Science

Master's in IT Security

Tools

ISO 27001:2022

ITIL

COBIT

CISA

CISM

CRISC

CISSP

Azure AZ/DP

AWS Certifications

Jobbeschreibung

Join our team as an IT Audit Manager at our locations in Berlin, Verl, and Amsterdam – with flexible working conditions available.

What you bring to this position

• Completed studies in Computer Science, IT Security, Information Security, Cyber Security, IT Governance / Management, or a related discipline.
• 5+ years of experience in auditing or consulting companies in regulated industries, ideally in the financial sector, focusing on IT / Tech.
• Specialized knowledge in Access Controls, API and Web Service Security, Configuration Management, Cloud Security, Authentication and Authorization, Secure Communication, and Penetration Testing.
• Experience with end-to-end IT audits, including scoping, fieldwork, reporting, and follow-up activities, following a risk-based approach and control testing.
• Familiarity with standards such as ISO 27001:2022, BSI C5, ITIL, and COBIT is advantageous.
• Excellent English language skills; German skills are a plus.
• Certifications like CISA, CISM, CRISC, CISSP, Azure AZ / DP, or AWS certifications are highly advantageous.
• Willingness to travel nationally and internationally (up to 20%), with 80% of work potentially from home.

What will be your challenge?

• Planning audits based on short-term, mid-term, and long-term risk-based approaches.
• Conducting internal audits focused on technical areas within regulated and non-regulated entities.
• Coordinating audit requests and defending external IT assessments in the second line of defense.
• Reporting audit results directly to management and identifying trends.
• Discussing mitigating measures with auditees and following up on mitigation plans.
• Ensuring compliance with internal and external information security requirements, such as DORA, PCI-DSS, ISO 27001, and ISO 22301.
• Planning and executing third- and fourth-party audits under the Digital Operational Resilience Act (DORA).

This role is based in Europe across multiple locations, including NW and DE.