IT Auditor (f/m/d)

Deutsche Börse AG; Frankfurt; Vor Ort; EUR 70.000 - 110.000; Vollzeit

Zusammenfassung

Deutsche Börse Group in Frankfurt invites a seasoned IT Audit professional to plan and execute risk-oriented audits across compliance, security and efficiency of critical systems and processes. You will evaluate internal controls, identify deficiencies and help implement pragmatic improvements with a cyber security perspective across the organisation's technology landscape.

The ideal candidate has a Bachelor's or Master's degree in computer science, AI, data analytics or cyber security, and at

Qualifikationen

• Bachelor’s or master’s degree in a relevant field such as computer science, AI, data analytics or cyber security.
• Hands-on experience in internal IT risk audits or internal audit in financial services is required.
• Strong knowledge of cyber security controls, risk assessment and IT governance.
• Experience with AI and data analytics applied to audits is beneficial.
• Professional certifications such as CIA, CISA, CISSP, CISM or CEH are nice-to-have.

Aufgaben

• Support planning and structuring IT audit areas and risk assessments, including cyber security risks.
• Prepare and execute IT audits with a focus on security controls and cyber resilience.
• Identify deficiencies and opportunities, and propose pragmatic remediation.
• Draft audit reports and communicate results to line management.
• Contribute to audit methodology and risk-based planning, incorporating cyber security frameworks.
• Provide consultation and support for general audits and project-level reviews.
• Advise business units on cyber security best practices and control effectiveness.
• Follow-up on audits and support IT projects from an audit and cyber security perspective.

Kenntnisse

Cyber security

Data analytics

AI

Ausbildung

Bachelor's or master's degree in computer science / AI / data analytics / cyber security or equivalent

Jobbeschreibung

Your career at Deutsche Börse Group

Your area of work

In your new position you will assume responsibility for planning and execution of risk-oriented IT audits with respect to compliance, security and efficiency of systems and processes. Your analysis and evaluation of the areas examined the identification of deficiencies within the internal control system as well as the successful implementation of your recommendations will contribute to improving the company's risk exposure. You will additionally bring a cyber security perspective to audit work, helping to identify and assess cyber-related risks across the organisation's technology landscape.

We are looking for a self-starting team player who can convince with enthusiasm and curiosity to understand and challenge a fast-paced, leading-edge technology environment. Experience and pragmatism in daily audit business, as well as an open mind for change and development, is completing your personal profile.

Your responsibilities

• Support in planning and structuring of IT audit areas and their risk assessment, including the assessment of cyber security risks
• Independent preparation and execution of IT audits as well as participating in IT audits, with a focus on security controls and cyber resilience where applicable
• Identification of deficiencies and improvement opportunities — including vulnerabilities in cyber security controls — as well as development of pragmatic approaches to solve problems
• Assistance with creation of audit reports and communication of results to responsible line management in the audited areas
• Active participation in shaping the audit methodology and processes as well as support of risk-based audit planning, incorporating cyber security frameworks and threat intelligence where relevant
• Consultation and support of general audits and potentially independent planning and execution of those audits
• Audit related consulting and support to business units, including guidance on cyber security best practices and control effectiveness
• Follow-up of audits and derived recommendations and support of IT projects from an audit and cyber security perspective

Your profile

• Bachelor's or master's degree, preferably in computer science, AI, data analytics, cyber security, or equivalent
• Must have 3+ years of professional experience in Internal Audit in EU financial services
• Strong knowledge of the financial sector; knowledge of clearing processes is an advantage
• Hands-on experience in the management of audits, preferably in the banking sector; alternatively, operational experience in IT or cyber security
• Practical experience in cyber security, such as vulnerability assessment, penetration testing concepts, security operations, incident response, and related tooling
• Experience and knowledge in using AI and data analytics in an audit context are beneficial
• Preferably, you hold professional certifications, e.g. CIA, CISA, CISSP, CISM, or CEH, and have knowledge of established IT and security regulations and standards such as DORA, ITIL, COBIT, BSI IT-Grundschutz, ISO 27001, and NIST CSF
• Experience and knowledge in project management, data analytics, and audit software
• High analytical skills, quick conceptual understanding of complex matters and thinking outside the box
• Initiative, autonomous and goal-oriented working style, paired with strong interpersonal skills, clear communication, organisational talent, and ability to work under pressure
• High level of proficiency in written and spoken English; German is a plus