IT Auditor (f/m/d)

In this role you lead risk-oriented IT audits, focusing on compliance, security, and efficiency of systems and processes. You’ll identify control deficiencies and help implement improvements to reduce risk, while applying a cybersecurity perspective across the organisation’s technology landscape. You will work with cross-functional teams in a fast-paced, cutting-edge environment and contribute to shaping audit methodology and risk-based planning. You drive practical, security-focused recommendations that support business objectives and resilience. This is an opportunity to combine audit expertise with cyber risk insight to strengthen the organization’s controls and threat posture.

• Plan and structure IT audit areas and assess risk, including cyber security risk
• Independently prepare and execute IT audits with focus on security controls and cyber resilience
• Identify deficiencies and improvement opportunities, including cyber security vulnerabilities, and propose pragmatic solutions
• Assist in creating audit reports and communicate results to line management
• Contribute to shaping audit methodology and risk-based planning, incorporating cyber security frameworks and threat intelligence
• Consult on general audits and potentially plan and execute them independently
• Provide audit-related consulting to business units on cyber security best practices and control effectiveness
• Follow up on audits and support IT projects from an audit and cyber security perspective

• 3+ years of professional Internal Audit experience in EU financial services
• Strong knowledge of the financial sector; knowledge of clearing processes advantageous
• Hands-on audit management experience, ideally in banking; or operational IT/cyber security experience
• Practical cyber security experience (vulnerability assessment, penetration testing concepts, security operations, incident response, tooling)
• Experience with AI and data analytics in an audit context is beneficial
• Professional certifications (e.g., CIA, CISA, CISSP, CISM, CEH) preferred
• Knowledge of IT and security regulations and standards (DORA, ITIL, COBIT, BSI IT-Grundschutz, ISO 27001, NIST CSF)
• Experience with project management, data analytics, and audit software
• High analytical ability, fast conceptual understanding, innovative thinking
• Autonomous and goal-oriented work style with strong communication and teamwork
• Proficiency in written and spoken English; German a plus

• analytical thinking
• initiative
• clear communication
• cyber security concepts and controls
• vulnerability assessment
• penetration testing concepts