Senior IT Auditor with German or French

EY; Wrocław; On-site; PLN 60,000 - 90,000; Full time

Benefits offered by this job

Continuous learning

Flexible work environment

Diverse and inclusive culture

Job summary

EY is seeking a Senior Technology Risk – IT Audit & Assurance professional in Wrocław/Katowice. This role involves leading technology risk and IT audit engagements across varied industries including financial services and energy.

The ideal candidate will have a strong background in IT audit, cybersecurity, and data analytics, backed by relevant academic qualifications. Benefits include continuous learning and a diverse culture.

Qualifications

• 2.5+ years’ experience in IT and/or information security.
• Preferably holds one or more recognised IT certifications such as CISA, CISM, CRISC, CISSP.

Responsibilities

• Lead and deliver technology risk and IT audit engagements.
• Perform effectiveness testing over IT application and general controls.
• Provide actionable recommendations to improve efficiency.

Skills

IT audit

Data analytics

Cybersecurity

Influencing teamwork

Problem-solving

Education

Bachelor’s or Master’s degree in Computer Science or related fields

Tools

COBIT

ITIL

ISO 2700x

Job description

Location and Work Arrangement

Wrocław / Katowice – 2 days in office / 3 days remote.

Job Title

Senior Technology Risk – IT Audit & Assurance

Role Summary

Lead and deliver technology risk and IT audit engagements across multiple industry sectors – financial services, energy & utilities, oil & gas, industrial products, retail & consumer products, and real estate. Support clients in managing technology risks and strengthening control environments in complex digital landscapes.

Key Responsibilities

• Perform effectiveness testing over IT application controls, IT general controls (ITGC), segregation of duties (SoD) with consideration of cybersecurity risks such as access management and data protection.
• Leverage data analytics techniques to support audit procedures, analyse large datasets, identify anomalies and generate risk‑focused insights.
• Support reviews of automated and AI‑driven processes, evaluate controls around algorithms, data usage and governance frameworks.
• Identify internal control deficiencies and provide actionable recommendations to improve efficiency and effectiveness.
• Define and execute audit procedures to assess whether identified deficiencies could be exploited, including in complex technology environments.
• Perform IT and security testing across areas such as database security, process automation (including RPA), IT asset management, software license compliance and cloud‑based solutions.
• Actively contribute to AI adoption within the team by identifying use cases, exploring innovative solutions and implementing AI tools to improve audit quality and efficiency.
• Provide guidance and share knowledge with team members while participating in audit procedures focused on complex, judgmental or specialized areas.

People Responsibilities

• Staff, motivate and manage the team, providing effective supervision and support in day‑to‑day activities.
• Contribute to knowledge sharing and capability building within the team, ensuring transfer of expertise in IT audit, cybersecurity, data analytics and AI.
• Identify development opportunities for team members and support their growth through coaching, feedback and on‑the‑job learning.
• Drive engagement and foster a collaborative, high‑performance environment focused on continuous improvement and innovation.
• Enhance team effectiveness through adoption of new tools, methodologies and technology‑driven solutions.

Experience Requirements

• 2.5+ years’ experience in IT and/or information security.

Technical Skills

• Bachelor’s or Master’s degree in Computer Science, Telecommunications, Cybernetics or related fields (e.g., Data Analytics, Cybersecurity, Information Technology).
• Good technical knowledge of operating systems, databases, application servers and network devices.
• Comprehensive understanding of complex information systems and ability to apply that knowledge to client situations.
• Knowledge of IT standards (COBIT, ITIL, ISO 2700x, NIS2 and others).
• Preferably holds one or more recognised IT certifications such as CISA, CISM, CRISC, CISSP, TOGAF, CEH or OSCP.

Soft Skills

• Positive attitude with strong willingness to learn and continuously develop, especially in AI, data analytics and emerging technologies.
• Excellent written and verbal communication skills in English.
• Excellent written and verbal communication skills in German.
• Strong project management skills with ability to inspire teamwork, ownership and accountability.
• Creative thinking and proactive problem‑solving mindset.
• Attention to detail and strong commitment to quality and accuracy.
• Interest in consulting and technology‑driven environments, openness to continuous development and innovation.
• Curiosity and openness to AI solutions in day‑to‑day work and contributing to team development.

Qualifications

• IT general controls review.
• Application controls review.
• Cybersecurity review.
• Infrastructure review.
• Experience performing business process assessments.
• Business continuity review.
• IT governance review.
• IT risk assessment and audit planning.
• Use of data analytics in audit and risk assessment.
• Exposure to artificial intelligence, including understanding of AI‑related risks and controls.

Benefits

• Continuous learning – develop mindset and skills to navigate whatever comes next.
• Success as defined by you – tools and flexibility to make a meaningful impact your way.
• Transformative leadership – insights, coaching and confidence to be the leader the world needs.
• Diverse and inclusive culture – embraced for who you are and empowered to use your voice.

Whistleblower Protection Statement

In compliance with the requirements of the Whistleblower Protection Act, our company has established the Procedure for reporting breaches of law and undertaking appropriate follow‑up actions. Any misconduct should be reported through the EY Ethics Hotline.