IT Auditor – Cybersecurity and Emerging Technology Risks

About the role

As IT Auditor at Bank J. Safra Sarasin, you will assess and challenge the technology and cybersecurity landscape of the bank's international private banking business. Working at the intersection of Technology, Cybersecurity, Risk, Governance and Business, you will independently plan and execute complex, risk-based audit assignments focused on IT, Cybersecurity and emerging technology risks, evaluating control effectiveness and giving independent, trusted guidance to senior management and C-Level representatives.

Key responsibilities

• Design and execute risk-based IT audit assignments and audit programs
• Assess and challenge Cybersecurity, IT Risk, IT Operations, Identity & Access Management, Network Security, Data Management, IT Resilience and emerging technologies including AI
• Analyse results from penetration testing, vulnerability assessments, security monitoring and other technical security assessments
• Keep up with emerging technology and cybersecurity developments and their potential impact on the Bank
• Communicate audit results to management and stakeholders, draft clear audit reports and monitor implementation of agreed management actions
• Collaborate with IT Auditors, Business Auditors, IT Management, Cybersecurity, Risk and other internal stakeholders

Required profile

• Higher education (university / FH) in Computer Science, Information Technology, Information Systems or a related field, or equivalent professional experience
• 10 years of practical experience in IT, Cybersecurity, Information Security, Technology Risk or a related field
• Hands-on experience in Cybersecurity, Network Security, Identity & Access Management, Vulnerability Management, IT Resilience or Security Operations
• Experience in IT Audit, Internal Audit, External Audit, Technology Risk or a comparable assurance function is an advantage
• Fluency in English; German and/or French is a plus
• Willingness to travel internationally about 20+ days per year

Required skills

• Proven expertise in analysing results from penetration testing tools, vulnerability scanners and other technical security tools
• Professional certifications such as CISA, CISM, CISSP or equivalent preferred
• Genuine interest in AI and its implications for Cybersecurity, Technology Risk and Governance; experience with AI, AI agents, machine learning or AI governance is a strong advantage
• Excellent analytical and problem-solving skills, and strong communication and stakeholder management skills

What we offer

• Entrepreneurial spirit in a family-owned bank
• Central city office locations across Switzerland
• Above-average insurance coverage fully borne by the bank
• Contribution to health insurance and meal allowance
• Global growth strategy and stable environment