IT Auditor

SCOR UK Company Limited; Paris; Sur place; EUR 65 000 - 90 000; Plein temps

Résumé du poste

SCOR UK Company Limited is seeking a skilled IT Audit professional to join the Internal Audit Information System team in Paris. The role focuses on planning and executing IT audits, evaluating ITGC/ITAC controls, and applying data-driven approaches to derive actionable insights for the business.

The ideal candidate has 2–5 years in IT audit within financial services, strong English and French, and experience with COBIT, ISO 27001 or NIST CSF. Travel up to 20% worldwide is required.

Qualifications

• 2 to 5 years of professional IT audit/technology risk experience, ideally in regulated financial services or audit firm.
• High ethics, integrity, confidentiality and discretion.
• Excellent English and French written and spoken communication are required.
• Strong analytical skills, ability to handle complex issues and influence change.
• Team player who can also work independently and rigorously within Global Internal Audit Standards.

Responsabilités

• Understand the business and technology environment; partner with stakeholders to manage risk and control environment.
• Plan and execute IT audit engagements per policies, standards and regulatory requirements.
• Assess design and operating effectiveness of ITGC and ITAC using appropriate techniques.
• Apply data-driven audits including risk assessment and control testing.
• Use data to inform risk understanding, test controls and provide insights to business.

Connaissances

IT risk assessment

ITGC/ITAC testing

Data analytics

Regulatory compliance

Cross-cultural communication

Stakeholder management

English & French fluency

Formation

Master's in IT Audit / Information Systems

CISA / CIA / CISSP (strong plus)

Description du poste

Under the supervision of the Head of Internal Audit Information System:

Responsibilities

• Understand the business and technology environment; partner with stakeholders to provide relationship management of the associated risk and control environment.
• Plan and execute IT audit engagements in accordance with internal audit policies, methodology, applicable regulatory requirements, and the Global Internal Audit Standards (IIA).
• Assess the design and operating effectiveness of IT General Controls and Application Controls (ITGC/ITAC) using appropriate audit techniques (inquiry, observation, inspection, and re-performance where relevant).
• Apply a data-driven approach to audits where relevant (risk assessment, control testing, and generation of actionable insights).
• Proactively seek ways to make the best use of data as part of our IT audit process including to inform our understanding of risks, test controls and provide relevant insights to the business.
• Contribute to defining audit scope and criteria by leveraging relevant frameworks/standards (e.g., COBIT, ITIL, ISO 27001, NIST CSF) and considering key regulatory expectations where applicable (e.g., DORA: governance, incident management, resilience testing, third‑party risk).
• Deliver high-quality audits, reviews, and advisory assignments on time, contributing across all phases: planning/scoping, fieldwork, and reporting.
• Communicate and discuss findings with business unit management
• Develop audit reports which identify deficiencies and underlying root causes; provide recommendations to mitigate/address deficiencies while adding value.
• Conduct research and successfully complete assigned training requirements necessary to maintain relevance.
• Work closely with Group Tech & Data Departments and business units at all levels to develop recommendations for audit findings, business process optimization, internal control and compliance.
• Perform follow-up work to assess the implementation status (and where applicable, effectiveness) of agreed actions and report progress as required.

Qualifications

Required experience & competencies

Experience

• 2 to 5 years of professional experience in an IT audit / technology risk role, ideally gained in a multinational company within a regulated financial services environment and/or within an audit firm.
• Highest ethics and integrity, with a strong sense of confidentiality and professional discretion.
• Excellent level of English required (as the majority of oral and written communications are in English), as well as in French
• Strong communication and interpersonal skills; ability to work effectively across cultures and geographies in an international environment.
• Strong analytical skills, good overview, critical sense and ability to deal with complex issues and influence change.
• Team player who can also work independently and rigorously, applying due professional care and in conformity with the Global Internal Audit Standards (IIA).
• Position based in Paris (16th district) with global travel up to ~20% (Americas, Europe, Asia).
• Demonstrated understanding of IT audit and technology risk concepts, including the ability to assess control design and operating effectiveness (e.g., ITGC / ITAC).
• Proven exposure to auditing one or more of the following domains: Data governance, Application development / SDLC, Project management / IT change delivery, Third‑party / cloud assurance, Technology infrastructure (databases, OS, networks), Cybersecurity, or Operational resilience (BCP/DR, resilience testing, incident readiness).
• Good working knowledge of at least one major control framework/standard such as COBIT, ISO 27001 or the NIST Cybersecurity Framework, and awareness of relevant regulatory requirements (e.g., the EU Digital Operational Resilience Act – DORA), with the ability to translate them into audit scope and test procedures.
• Awareness of emerging IT risks and internal audit best practices, such as evolving cloud/third-party dependencies, resilience expectations, and new security threats.
• Strong interest in new technologies (AI, Data Science, etc.) and the ability to translate that interest into practical audit value (risk identification, analytics, sharper control testing).

Education

• Master’s degree in IT Audit, Information Systems, Cybersecurity, Data Engineering or a related field.
• Professional credentials (e.g., CISA, CIA, CISSP) or professional qualifications (ITIL, Project Management) are seen as a strong plus.

About Us

As a leading global reinsurer, SCOR offers its clients a diversified and innovative range of reinsurance and insurance solutions and services to control and manage risk. Applying “The Art & Science of Risk,” SCOR uses its industry-recognized expertise and cutting-edge financial solutions to serve its clients and contribute to the welfare and resilience of society in around 160 countries worldwide.

Working at SCOR means engaging with some of the best minds in the industry – actuaries, data scientists, underwriters, risk modelers, engineers, and many others – as we work together to find solutions to pressing challenges facing societies.

As an international company, our common culture is defined by “The SCOR Way.” Serving both to build momentum that drives the Group forward and as a compass to guide our actions and choices, The SCOR Way is anchored by five core values, reflecting the input of employees at all levels of the Group. We care about clients, people, and societies. We perform with integrity. We act with courage. We encourage open minds. And we thrive through collaboration.

SCOR supports inclusion and the diversity of talents, and all positions are open to people with disabilities.