Group IT Senior Internal Auditor

MAIRE; Milano; On-site; EUR 33,000 - 55,000; Full time

Job summary

MAIRE S.p.A. is seeking a Group IT Senior Internal Auditor to strengthen its internal audit function across a complex, international technology landscape.

You will evaluate IT governance, risks, and controls, promoting cybersecurity best practices and data governance while translating technical risks for senior management. The role covers ITGCs, application controls, and regulatory alignment (NIS2, AI Act, ISO 27001).

Qualifications

• Bachelor’s or Master’s degree in IT, CS, Engineering, or related field.
• 7+ years of IT audit, IT risk consulting, cybersecurity, or similar roles.
• Knowledge of ITGCs and application controls; familiarity with NIS2, AI Act, ISO/IEC 27001:2022, NIST, COBIT.
• Fluency in English; strong analytical and problem-solving skills.
• Experience with CAATs/data analytics tools (ACL, SQL, advanced Excel).

Responsibilities

• Execute IT audit engagements per IIA standards and Group policies.
• Assess IT governance frameworks and control design/implementation.
• Identify key IT controls to mitigate business risks.
• Support ITGCs and application controls testing.
• Prepare audit reports with observations and recommendations.
• Follow-up audits to verify closure of management actions.
• Stay updated on cybersecurity, data governance, and regulatory topics.

Skills

IT audit

IT risk management

Cybersecurity

Regulatory compliance

Data analytics

CAATs/SQL/Excel

English fluency

Education

Bachelors/Masters in IT/CS/Eng/Business

Tools

ACL

SQL

Advanced Excel

Job description

MAIRE S.p.A. is a leading engineering group providing technology solutions and project execution in the downstream segment of energy services, as well as in the chemicals and fertilizers industries. The Group operates through two business units: Integrated E&C Solutions and Sustainable Technology Solutions, the latter active in sustainable fertilizers, low carbon energy vectors, and innovative materials and circular solutions. With operations in around 50 countries, MAIRE employs approximately 10,800 people.

MAIRE S.p.A. is seeking a Group IT Senior Internal Auditor to join the Group Internal Audit Function.

As part of the Function, the Group IT Senior Internal Auditor contributes to the independent evaluation of the Group’s IT governance, risk management, and control framework across a complex and international environment. The role supports the organization in managing technology-related risks by assessing systems, infrastructure, and digital processes, while promoting best practices in cybersecurity, data governance, and regulatory compliance. The position requires strong business acumen and the ability to translate complex technical risks into clear insights for senior management and stakeholders, to help strengthen decision-making, and ensure IT capabilities effectively support the Group’s strategic objectives and operational excellence.

Key Responsibilities

• Execute IT audit engagements in strict coordination with the senior roles and in accordance with the International Professional Practices Framework of the Institute of Internal Auditors and with the Group Document Management System;
• Guarantee the timely and accurate completion of the assigned activity;
• Analyze policies, procedures, organizational chart and the Group Document Management System, to develop a thorough understanding of business processes in scope for assigned engagements (e.g., cybersecurity, access management, change management, data integrity, and incident response);
• Identify main key controls to prevent major business risks;
• Prepare and execute work programs to evaluate the design and the implementation of controls over the processes under review;
• Assess IT governance frameworks and ensure alignment with business objectives, industry standards and regulatory requirements (e.g., Directive NIS2, AI Act, ISO/IEC 27001:2022, NIST Cybersecurity Framework, COBIT);
• Support the execution of the IT General Controls (ITGCs) and application controls;
• Participate in developing internal audit reports, identifying observations and suitable recommendations;
• Execute, in close coordination with the senior roles and the Responsible, follow-up audits to monitor management’s interventions, where necessary;
• Stay continuously updated on relevant topics to ensure effective execution of assigned responsibilities;
• Contribute to the evolution of the audit approach, supporting the development of data analytics, automation tools and continuous auditing procedures.

Key Requirements & Skills

• Bachelor’s or Master’s degree in Information Technology, Computer Science, Engineering, Business Administration or any related field;
• 7+ years of experience in IT audit, IT risk consulting, cybersecurity or similar roles;
• Strong knowledge of IT General Controls (ITGCs) and application controls, IT risk management and cybersecurity processes;
• Good knowledge of key IT and information security regulations and frameworks, such as Directive NIS2, AI Act, ISO/IEC 27001:2022, NIST Cybersecurity Framework, and COBIT;
• Advanced analytical skills and problem-solving capability;
• Knowledge of CAATs / data analytics tools (e.g., ACL, SQL, advanced Excel) and familiarity with continuous auditing procedures;
• Fluency in English;
• Excellent command of Microsoft Office package;
• Professional certifications (CISA or CIA strongly preferred, CISSP, CISM, CRISC as a plus).

Contract Type and Classification

• Contract type: Permanent;
• Applicable collective agreement (NCLC): Chemical and Chemical-Pharmaceutical (identification code B011);
• Job classification level: Middle Managers, consistent with job requirements and applicable Collective Agreement.

Compensation

The initial gross annual salary for this position, paid over 14 monthly installments, will be € 55.000.

The compensation package will include the applicable elements of the Collective Agreement as well as benefits provided under company agreements, including flexible benefits and a participation bonus.

Any additional variable components and/or benefits, regulated by Standards, Policies and/or company agreements, will be illustrated during the selection process.

This job opportunity is open to all individuals, in compliance with the principle of equal opportunities and non-discrimination, in accordance with applicable regulations.

Transparency Statement

At the end of the selection process, the Company reserves the right to make an offer with a job level and/or gross annual salary different from what is indicated in this job posting, consistently with the candidate’s professional experience and technical and soft skills.

Any deviation from the information provided in the job posting will be justified by objective and verifiable elements that emerged during the selection process, including:

• Professional experience significantly higher/lower than the target profile;
• Additional specialized skills relevant to the role;
• Scope and complexity of responsibilities assigned in the final job configuration;
• Alignment with internal grading system and consistency with comparable roles;
• Outcomes of technical evaluations and/or assessments used in the selection process.

Regulatory Compliance

The decision is:

• taken in compliance with the principle of equal pay for equal work or work of equal value pursuant to Legislative Decree 96/2026 and EU Directive 2023/960;
• is consistent with the applicable National Collective Bargaining Agreement;
• complies with the values and principles set out in the Group Code of Ethics and in the Diversity, Equity & Inclusion Policy.

To learn more about MAIRE: https://www.groupmaire.com/en/