IT / IT Security Auditor

About the role

A financial client is looking for an IT / IT Security Auditor to join its Basel-based team in a permanent position. The auditor assesses and challenges the technology and cybersecurity landscape of the client's international company, working at the intersection of technology, cybersecurity, risk, governance and business. The role involves independently planning and executing complex, risk-based audit assignments focused on IT, cybersecurity and emerging technology risks, and providing independent, trusted guidance to senior management and C-level stakeholders.

Key responsibilities

• Design and execute risk-based IT audit assignments and audit programs
• Assess and challenge cybersecurity, IT risk, IT operations, identity and access management, network security, data management, IT resilience and emerging technologies including AI
• Analyse results from penetration testing, vulnerability assessments, security monitoring and other technical security assessments
• Keep up with emerging technology and cybersecurity developments and their potential impact on the bank
• Communicate audit results to management and stakeholders, draft clear audit reports and monitor the implementation of agreed management actions
• Collaborate with IT auditors, business auditors, IT management, cybersecurity and risk teams to strengthen the control environment

Required profile

• University degree (FH) in computer science, information technology, information systems or a related field, or equivalent professional experience, with 10 years of practical experience in IT, cybersecurity, information security, technology risk or a related field
• Hands-on experience in cybersecurity, network security, identity and access management, vulnerability management, IT resilience or security operations
• Experience in IT audit, internal audit, external audit, technology risk or a comparable assurance function is an advantage
• Professional certifications such as CISA, CISM or CISSP are preferred
• Genuine interest in artificial intelligence and its implications for cybersecurity, technology risk and governance; experience with AI, AI agents, machine learning or AI governance is a strong advantage
• Willingness to travel internationally about 20+ days per year
• Fluency in English; German and/or French is a plus

Required skills

• Analysis of results from penetration testing tools, vulnerability scanners and other technical security tools
• Excellent analytical and problem-solving skills
• Strong communication, presentation and stakeholder management skills