Senior IT Auditor

Carlsberg Group; Poznań; Hybrid; PLN 110,000 - 170,000; Full time

Benefits offered by this job

Private health care

Annual bonus

Beer allowance

MyBenefit system

Co-financed lunch

Social events

Bike parking

Job summary

Carlsberg Shared Services (CSS) is seeking a Senior IT Auditor to join the Group Internal Audit team in Poznan. The role focuses on IT audits, controls assessment, and risk-based recommendations across governance, cybersecurity, and data protection areas.

You will collaborate with the Integrated Information Technology group to strengthen internal controls and support compliant, secure IT operations.

Qualifications

• 5+ years IT audit experience in a global or complex environment.
• Solid knowledge in IT General Controls, Application Controls, and IT governance.
• Cybersecurity knowledge including IAM, network security, vulnerability management, incident response, cloud security, and third‑party risk.
• Experience with data protection/privacy requirements (GDPR, data retention, data classification, security-by-design).
• Familiarity with EU AI Act and NIS2 Directive.
• Working knowledge of ISO 27001/27002, COBIT, NIST CSF, CIS Controls, and related standards.
• Excellent written/spoken communication for stakeholders and technical audiences.

Responsibilities

• Lead and execute end-to-end IT audits aligned with the annual audit plan.
• Analyze IT controls and assess effectiveness with evidence-based findings.
• Develop objective, risk-based recommendations addressing root causes.
• Assess IT governance, cybersecurity, IT general and application controls, and emerging risks.
• Identify control weaknesses and opportunities to improve efficiency.
• Follow up on remediation actions to verify risk reduction.
• Provide SME input in non-IT audits where technology drives risk.

Skills

IT audit experience

IT governance

Cybersecurity knowledge

Data privacy (GDPR)

Regulatory awareness

Communication skills

Tools

ISO 27001/27002

COBIT

NIST CSF

CIS Controls

Job description

Location: Poznan, PL

Entity / company: Carlsberg Shared Services (CSS)

Senior IT Auditor

Role overview

This global role will place you at the center of IT-related initiatives within Group Internal Audit. You will join a multidisciplinary team and work closely with our Integrated Information Technology team to support Carlsberg Group in continuously enhancing its internal control environment.

What youll be doing

Your key responsibilities will include:

• Leading and executing end-to-end IT audits, ensuring delivery in line with the annual audit plan.
• Analyzing IT controls and assessing their effectiveness, while producing clear, evidence-based findings.
• Developing objective, risk-based recommendations that address root causes rather than just symptoms.
• Assessing IT governance, cybersecurity, IT general controls, application controls, and emerging risks.
• Identifying control weaknesses and improvement opportunities to enhance operational efficiency.
• Following up on remediation actions and evaluating whether identified risks have been effectively mitigated.
• Providing subject-matter expertise in non-IT audits where technology is a key risk driver.

What we’re looking for

We are looking for someone with a curious mindset with great attention to detail who enjoys collaboration and a changing environment. Someone who shares our core values: integrity, ownership, accountability, and a commitment to doing the right thing, and who has a solid IT background that includes:

We are looking for someone with a curious mindset, good attention to detail, and the ability to thrive in a collaborative and evolving environment.

• 5+ years of IT audit experience (internal or external) in a global or complex environment.
• Solid knowledge in IT General Controls, Application Controls, and IT governance.
• Cybersecurity knowledge, including identity & access management, network security, vulnerability management, incident response, cloud security, and third-party risk.
• Experience with data protection and privacy requirements, including GDPR, data retention, data classification, and security-by-design principles.
• Familiarity with emerging regulations, such as EU AI Act and NIS2 Directive.
• Working knowledge of major frameworks: ISO 27001/27002, COBIT, NIST CSF, CIS Controls, and other industry standards.
• Effective communication: capable of challenging stakeholders and simplifying complex technical topics.

What you can expect

We’re asking for a lot, but youll be well-rewarded with:

• Working in a hybrid mode (min. 2 days in the office per week)
• Private health care, accident insurance, and MyBenefit system at your disposal
• Annual bonus
• Christmas gift & MyBenefit points
• Additional holiday for Birthday & job anniversary
• Internal trainings
• Periodical beer allowance & 0% beer available at the office
• Co-financed lunch
• Social events such as e.g. Thursday Bars in the office
• Employee Referral Program
• Bike parking space
• Modern ergonomic office space with a chillout zone
• Exciting growth and development opportunities within the organization
• Working in a passionate, international environment.

Carlsberg Group: Brewing for a better today and tomorrow

For us success has always been in the diverse mix of our people, our beers and our brands. At Carlsberg, we want to recruit and develop people with a global mindset, cultural understanding, and international experience to ensure that our organization stays agile, inclusive and prepared for future growth. Only by acknowledging and harvesting from different perspectives and experiences, will we gain competitive advantage and leverage the effect of diversity for business growth. Carlsberg aims to create equal access to opportunity regardless of social identity, and we encourage everyone to apply regardless of gender, nationality, race, religion or any other characteristics protected by law.