IT Auditor (f/m/d)

Deutsche Börse Group; Frankfurt; Vor Ort; EUR 70.000 - 110.000; Vollzeit

Zusammenfassung

Deutsche Börse Group seeks an experienced IT Auditor to plan and execute risk-driven audits across compliance, security and efficiency of systems and processes.

You will identify deficiencies, implement recommendations, and bring a cyber security perspective to assess cyber-related risks across the technology landscape. Strong communication and collaboration with business units are essential.

Qualifikationen

• Bachelor’s or master’s degree in computer science, AI, data analytics, cyber security, or equivalent.
• 3+ years of professional experience in Internal Audit in EU financial services.
• Strong knowledge of the financial sector; knowledge of clearing processes is an advantage.
• Hands-on experience in audit management, preferably in banking; cyber security exposure is a plus.
• Experience with AI and data analytics in an audit context is beneficial.

Aufgaben

• Support in planning and structuring IT audit areas and their risk assessment, including cyber security risks.
• Independent preparation and execution of IT audits, focusing on security controls and cyber resilience.
• Identify deficiencies and improvement opportunities, including vulnerabilities in cyber security controls.
• Assist in creating audit reports and communicating results to line management.
• Contribute to shaping audit methodology and risk-based planning, incorporating cyber security frameworks.

Kenntnisse

IT audit

Cyber security

Data analytics

English proficiency

Ausbildung

Bachelor's or master's in computer science / cyber security / data analytics

Tools

Audit software

Jobbeschreibung

Your area of work

In your new position you will assume responsibility for planning and execution of risk-oriented IT audits with respect to compliance, security and efficiency of systems and processes. Your analysis and evaluation of the areas examined the identification of deficiencies within the internal control system as well as the successful implementation of your recommendations will contribute to improving the company's risk exposure. You will additionally bring a cyber security perspective to audit work, helping to identify and assess cyber-related risks across the organisation's technology landscape.

In your new position you will assume responsibility for planning and execution of risk-oriented IT audits with respect to compliance, security and efficiency of systems and processes. Your analysis and evaluation of the areas examined the identification of deficiencies within the internal control system as well as the successful implementation of your recommendations will contribute to improving the company's risk exposure. You will additionally bring a cyber security perspective to audit work, helping to identify and assess cyber-related risks across the organisation's technology landscape.

We are looking for a self-starting team player who can convince with enthusiasm and curiosity to understand and challenge a fast-paced, leading-edge technology environment. Experience and pragmatism in daily audit business, as well as an open mind for change and development, is completing your personal profile.

Your Responsibilities

• Support in planning and structuring of IT audit areas and their risk assessment, including the assessment of cyber security risks
• Independent preparation and execution of IT audits as well as participating in IT audits, with a focus on security controls and cyber resilience where applicable
• Identification of deficiencies and improvement opportunities — including vulnerabilities in cyber security controls — as well as development of pragmatic approaches to solve problems
• Assistance with creation of audit reports and communication of results to responsible line management in the audited areas
• Active participation in shaping the audit methodology and processes as well as support of risk-based audit planning, incorporating cyber security frameworks and threat intelligence where relevant
• Consultation and support of general audits and potentially independent planning and execution of those audits
• Audit related consulting and support to business units, including guidance on cyber security best practices and control effectiveness
• Follow-up of audits and derived recommendations and support of IT projects from an audit and cyber security perspective

Your profile

• Bachelor's or master's degree, preferably in computer science, AI, data analytics, cyber security, or equivalent
• Must have 3+ years of professional experience in Internal Audit in EU financial services
• Strong knowledge of the financial sector; knowledge of clearing processes is an advantage
• Hands-on experience in the management of audits, preferably in the banking sector; alternatively, operational experience in IT or cyber security
• Practical experience in cyber security, such as vulnerability assessment, penetration testing concepts, security operations, incident response, and related tooling
• Experience and knowledge in using AI and data analytics in an audit context are beneficial
• Preferably, you hold professional certifications, e.g. CIA, CISA, CISSP, CISM, or CEH, and have knowledge of established IT and security regulations and standards such as DORA, ITIL, COBIT, BSI IT-Grundschutz, ISO 27001, and NIST CSF
• Experience and knowledge in project management, data analytics, and audit software
• High analytical skills, quick conceptual understanding of complex matters and thinking outside the box
• Initiative, autonomous and goal-oriented working style, paired with strong interpersonal skills, clear communication, organisational talent, and ability to work under pressure
• High level of proficiency in written and spoken English; German is a plus