Senior Internal Auditor - IT, Security & Third Parties

Generali Italia; Lombardia; On-site; EUR 70,000 - 110,000; Full time

Job summary

Banca Generali is seeking an experienced IT & Security Auditor to join its Internal Audit team. The role focuses on risk-based audits of IT, security and third-party processes across multiple entities in Italy and abroad, with advisory duties and cross-functional collaboration.

The candidate should have 5+ years in IT and security auditing within financial services, strong knowledge of regulatory frameworks, and excellent communication skills. Some travel may be required.

Qualifications

• Bachelor's or Master's degree in Information Technology, Computer Science, Engineering, or related field.
• Languages: Italian (native), English (fluent).
• Strong knowledge of IT, Security and AI-related audit controls.
• Experience with third-party governance and ICT vendors.
• Familiarity with IT & Security audit regulations/frameworks (NIST, COBIT, ITIL, Circ. 285, DORA, AI Act).
• At least 5 years of proven IT and security auditing experience, ideally in financial institutions.

Responsibilities

• Carry out audit activities on bank processes with a focus on IT & security controls and third parties governance.
• Assess security, reliability, and integrity of IT systems, apps, databases, and infrastructure.
• Audit entities in multiple jurisdictions (Italy, Luxembourg, Switzerland) focusing on IT & security controls.
• Support Head of Internal Audit in risk assessment and audit planning.
• Discuss audit results with stakeholders and write practical recommendations.
• Monitor audit issues and validate closure of actions.
• Provide advisory on ad-hoc projects and topics.
• Stay updated on AI trends and best practices to enhance audits.
• Occasional travel may be required.

Skills

Independent work

Risk assessment

Communication skills

Audit tools

Data analytics

IA methodology

Education

BSc/MSc in IT/CS/Engineering

Tools

NIST

COBIT

ITIL

Audit software

Job description

Job Description

Banca Generali (www.bancagenerali.com) is a private bank leader in Italy in financial planning and in the protection of clients through a network of private consultants at the top of the sector in terms of skills and expertise/professionalism. Within the Internal Audit function we are looking for a talented and proactive resource to join the team.

The Internal Audit function, as an independent Third Line of Defense control function, is responsible for planning and carrying out risk-based audit engagement on Banca Generali Group. The Audit IT, Security and Third Parties team is responsible for the audit activities on IT, Security and third parties core processes in the Legal Entities of the banking group.

• Carry out audit activities on the bank processes with a focus on IT & security controls policies and procedures, third parties management and related Regulation and standards
• Assess the security, reliability and integrity of IT systems, including applications, databases and infrastructure
• Carry out audit activities on the Controlled Legal Entities of the banking group (in Italy, Luxembourg and Switzerland) with a focus on IT & security controls and third parties management
• Support the Head of Internal Audit and the team in performing risk assessment activities and defining Audit plan;
• Discuss audit results with stakeholders
• Write practical recommendations and audit report
• Monitor audit issues and validate actions closure
• Provide advisory on ad-hoc projects / topics
• Stay updated on emerging IT & security trends, threats and best practices to enhance the audit process (for example, Artificial Intelligence)
• Occasional travel may be required.

Requirements

We are seeking candidates with a strong academic background in STEM disciplines.

• Bachelor's or Master's degree in Information Technology, Computer Science, Engineering, or any related field
• Languages: Italian (native), English (fluent)
• Strong knowledge of processes and controls in IT, Security and Artificial Intelligence Area
• Good knowledge of third parties' management process, focusing on ICT vendors governance
• Strong knowledge of the key IT & Security Audit Regulations and Frameworks, such as NIST, COBIT, ITIL, Circ. 285, DORA, AI Act
• Basic knowledge of corporate governance, banking business and regulatory requirements
• At least 5 years of proven experience in IT and security auditing and AI-related activities, ideally within Internal Audit functions in financial institutions.

Main Skills required

• Ability to work independently and as a part of a team
• Knowledge and ability to evaluate (with limited supervision) and enhance internal control system evaluation processes
• Capability of managing risk assessment (with limited supervision)
• Good written and oral communication skills, with the proven ability to present and explain complex information to diverse audiences including senior level staff
• Proficiency in audit tools and processes
• Strong knowledge of Internal Audit methodology and principles and of the internal control system
• Good experience in the use of data analytics.

Nice to have:

• Professional certification (ACCA, CIA, CISA, CISSP, CFE, CFSA) or equivalent would be an advantage
• Proactive in leveraging Artificial Intelligence to enhance Internal Audit processes
• High attention to detail and deadlines
• Excellent analytical skills
• Integrity, confidence & accountability, flexibility, and life-long learning
• Resilience, stress management, time management and problem solving
• Strategic and innovative thinking as well as change management
• Good in negotiation, teamwork and collaboration.

Company Profile

Banca Generali is a leading private bank in Italy, specializing in financial planning and wealth protection through a network of private financial advisors recognized among the best in the industry for their expertise and professionalism.

At Banca Generali, we are strongly committed to diversity and inclusion. We promote behaviors and initiatives that foster a sense of belonging for everyone, creating an inclusive workplace where individual differences are valued and recognized as a source of strength and innovation.