IT Audit Manager

Carlsberg Group; Poznań; Hybrid; PLN 250,000 - 380,000; Full time

Benefits offered by this job

Hybrid work model

Annual bonus

Private health care

MyBenefit system

Beer allowance

Lunch subsidy

Social events

Job summary

Carlsberg Group is seeking an IT Audit Manager to lead end-to-end IT audits and enhance the organization’s internal control environment. You will work within Group Internal Audit and collaborate with the Integrated Information Technology team on risk-based planning and GIA projects.

The role requires 8+ years in IT audit, ERP and cybersecurity audit experience, and familiarity with ISO 27001/COBIT/NIST frameworks. Hybrid work model and strong stakeholder engagement are expected.

Qualifications

• 8+ years IT audit experience in international company.
• Experience auditing ERP systems including SAP, MS Dynamics 365, Dynamics NAV/Navision.
• Extensive cybersecurity audit experience across governance, IAM, vulnerability mgmt, incident response, third‑party security, cloud security, monitoring.
• Knowledge of IT governance, risk management and internal control frameworks.
• Certifications like CISA, CISM, CISSP, ISO 27001 Lead Auditor are beneficial.

Responsibilities

• Lead end-to-end IT audits in support of the audit plan.
• Report objective, fact-based audit results to stakeholders.
• Recommend practical, effective controls to address weaknesses.
• Identify internal control deficiencies and improvement recommendations.
• Follow up on management actions to mitigate risks from audits.
• Support GIA projects including methodology dev, training, and risk-based planning.

Skills

IT audit

ERP audits

Cybersecurity audits

IS0 27001 / COBIT / NIST

Data analytics

Stakeholder management

Certifications (CISA/CISM/CISSP)

Tools

SAP

Microsoft Dynamics 365

Microsoft Dynamics NAV/Navision

Job description

Select how often (in days) to receive an alert:

Select how often (in days) to receive an alert:

Entity / company: Carlsberg Shared Services (CSS)

IT Audit Manager

Role overview

This is a global role that will involve you in IT-related initiatives across Group Internal Audit. You will be part of a dynamic, multidisciplinary team, working closely with the Integrated Information Technology team to support the organization’s ongoing efforts to enhance its internal control environment.

What you’ll be doing

Your primary tasks and responsibilities will include:

• Leading end-to-end IT audits in support of the audit plan.
• Reporting objective, fact-based audit results to relevant stakeholders.
• Recommending practical, effective, and efficient controls to address identified weaknesses.
• Identifying internal control deficiencies and providing recommendations to improve operational efficiency and effectiveness.
• Following up on management actions to mitigate risks identified in previous audits.
• Supporting internal GIA projects, including methodology development, training, and the risk-based audit planning process.

What we’re looking for

We are looking for someone with a curious mindset, great attention to detail, and effective communication and stakeholder management skills. The ideal candidate enjoys collaboration, thrives in a dynamic environment, and demonstrates integrity, ownership, accountability and ethical business conduct.

The role requires a solid IT background, including:

• 8+ years of experience in IT audit experience, either as an external or internal auditor within an international company, covering areas such as IT General Controls, Application Controls and Project Audits.
• Experience auditing ERP systems, including systems such as SAP, Microsoft Dynamics 365, and Microsoft Dynamics NAV/Navision.
• Extensive experience in cybersecurity audits, including areas such as security governance, identity and access management, vulnerability management, incident response, third-party security risk, cloud security, and security monitoring.
• Solid understanding of IT governance, risk management, and internal control frameworks.
• Knowledge of established frameworks and standards such as ISO/IEC 27001, COBIT, NIST Cybersecurity Framework, and CIS Controls.
• Ability to assess the design and operating effectiveness of cybersecurity controls and translate technical findings into clear, risk-based messages for senior stakeholders.
• Experience using data analytics to support audit planning, testing, continuous monitoring, or control assurance will be an advantage.
• Certifications such as CISA, CISM, CISSP, ISO 27001 Lead Auditor, or similar are beneficial.

What you can expect

We’re asking for a lot, but you’ll be well-rewarded with:

• Working in a hybrid mode (min. 2 days in the office per week)
• Private health care, accident insurance, and MyBenefit system at your disposal
• Annual bonus
• Christmas gift & MyBenefit points
• Additional holiday for Birthday & job anniversary
• Internal trainings
• Periodical beer allowance & 0% beer available at the office
• Co-financed lunch
• Social events such as e.g. Thursday Bars in the office
• Employee Referral Program
• Bike parking space
• Modern ergonomic office space with a chillout zone
• Exciting growth and development opportunities within the organization
• Working in a passionate, international environment.

We read applications continuously and vacancies may be filled anytime. We look forward to receiving your application.

Carlsberg Group: Brewing for a better today and tomorrow

For us success has always been in the diverse mix of our people, our beers and our brands. At Carlsberg, we want to recruit and develop people with a global mindset, cultural understanding, and international experience to ensure that our organization stays agile, inclusive and prepared for future growth. Only by acknowledging and harvesting from different perspectives and experiences, will we gain competitive advantage and leverage the effect of diversity for business growth. Carlsberg aims to create equal access to opportunity regardless of social identity, and we encourage everyone to apply regardless of gender, nationality, race, religion or any other characteristics protected by law.