Senior Internal Auditor – IT, Security & Third Parties

Generali; Milano; On-site; EUR 70,000 - 90,000; Full time

Benefits offered by this job

Supplementary health coverage

Job summary

Banca Generali in Italy is seeking a proactive IT & Security Audit professional to join the Internal Audit function. The role focuses on risk-based audits of IT systems, security controls, third-party governance, and regulatory compliance across entities in Italy, Luxembourg, and Switzerland.

You will support risk assessment, draft audit plans, discuss results with stakeholders, and provide practical recommendations. Occasional travel may be required, and a strong STEM background is preferred.

Qualifications

• Bachelor’s or Master’s degree in IT, Computer Science, Engineering, or related field.
• Strong knowledge of IT, Security and AI audit controls and frameworks.
• Experience with third-party management processes and ICT vendor governance.
• Familiarity with IT risk regulations (NIST, COBIT, ITIL, DORA, AI Act).
• 3+ years in IT & security audit within financial institutions.

Responsibilities

• Carry out IT & security audit activities with focus on controls and third parties.
• Assess the security, reliability and integrity of IT systems and data.
• Audit Controlled Legal Entities across multiple countries (Italy, Luxembourg, Switzerland).
• Support risk assessment and define audit plans with Head of Internal Audit.
• Discuss audit results with stakeholders and write recommendations.
• Monitor audit issues and validate closure of actions.
• Provide advisory on ad-hoc topics and projects.
• Stay updated on IT & security trends and AI implications.

Skills

Independent work

Teamwork

Risk assessment

Communication skills

Data analytics

Audit tools proficiency

Internal Audit methodology

IT & Security audit

AI awareness

Stakeholder management

Education

Bachelor’s or Master’s degree in IT/CS/Engineering

Job description

Banca Generali (www.bancagenerali.com) is a private bank leader in Italy in financial planning and in the protection of clients through a network of private consultants at the top of the sector in terms of skills and expertise/professionalism. Within the Internal Audit function we are looking for a talented and proactive resource to join the team.

The Internal Audit function, as an independent Third Line of Defense control function, is responsible for planning and carrying out risk-based audit engagement on Banca Generali Group. The Audit IT, Security and Third Parties team is responsible for the audit activities on IT, Security and third parties core processes in the Legal Entities of the banking group

• Carry out audit activities on the bank processes with a focus on IT & security controls policies and procedures, third parties management and related Regulation and standards


• Assess the security, reliability and integrity of IT systems, including applications, databases and infrastructure


• Carry out audit activities on the Controlled Legal Entities of the banking group (in Italy, Luxembourg and Switzerland) with a focus on IT & security controls and third parties management


• Support the Head of Internal Audit and the team in performing risk assessment activities and defining Audit plan;


• Discuss audit results with stakeholders


• Write practical recommendations and audit report


• Monitor audit issues and validate actions closure


• Provide advisory on ad-hoc projects / topics


• Stay updated on emerging IT & security trends, threats and best practices to enhance the audit process (for example, Artificial Intelligence)


• Occasional travel may be required

Requirements

We are seeking candidates with a strong academic background in STEM disciplines.

• Bachelor’s or Master’s degree in Information Technology, Computer Science, Engineering, or any related field


• Strong knowledge of processes and controls in IT, Security and Artificial Intelligence Area


• Good knowledge of third parties’ management process, focusing on ICT vendors governance


• Strong knowledge of the key IT & Security Audit Regulations and Frameworks, such as NIST, COBIT, ITIL, Circ. 285, DORA, AI Act


• Basic knowledge of corporate governance, banking business and regulatory requirements


• Minimum 3 years of proved experience in IT & security audit and activities on AI, ideally in Internal Audit functions within financial institutions

Main Skills required

• Ability to work independently and as a part of a team


• Knowledge and ability to evaluate (with limited supervision) and enhance internal control system evaluation processes


• Capability of managing risk assessment (with limited supervision)


• Good written and oral communication skills, with the proven ability to present and explain complex information to diverse audiences including senior level staff


• Proficiency in audit tools and processes


• Strong knowledge of Internal Audit methodology and principles and of the internal control system


• Good experience in the use of data analytics

Nice to have:

• Professional certification (ACCA, CIA, CISA, CISSP, CFE, CFSA) or equivalent would be an advantage


• Proactive in leveraging Artificial Intelligence to enhance Internal Audit processes


• High attention to detail and deadlines


• Excellent analytical skills


• Integrity, confidence & accountability, flexibility, and life-long learning


• Resilience, stress management, time management and problem solving


• Strategic and innovative thinking as well as change management


• Good in negotiation, teamwork and collaboration

Che cosa offriamo:

• Copertura sanitaria integrativa

Company Profile

Generali is proud to be an inclusive employer that considers applicants regardless of gender, gender identity, sexual orientation, ethnicity, disability, religion, political views, marital status or philosophy of life.

If you have a disability or special need that requires accommodation or assistance, we will support you during the selection process