Senior IT Auditor

About the role

An international financial services group is looking for an experienced IT Auditor to strengthen its technology, cybersecurity and risk management landscape. The role combines technical expertise with a solid understanding of governance, risk and controls, taking ownership of complex audit engagements and providing independent insights to senior management.

Key responsibilities

• Plan, lead and deliver risk-oriented IT audit engagements, including audit strategies and testing procedures.
• Evaluate technology risks such as cybersecurity, IT governance, infrastructure, network security, access management, data protection, operational resilience and emerging technologies.
• Analyse complex IT architectures, identify weaknesses and assess the effectiveness of security measures and internal controls.
• Review findings from penetration tests, vulnerability scans, security assessments and monitoring, and assess AI and other emerging technologies.
• Present findings and recommendations to stakeholders, including senior management, and prepare clear audit documentation.
• Track remediation activities and work with IT, Cybersecurity, Risk Management, Governance and business functions to improve controls.

Required profile

• Degree in Computer Science, Information Technology, Information Systems or a comparable discipline, or equivalent professional experience.
• At least 10 years of relevant experience in IT, Cybersecurity, Information Security, Technology Risk or a related field.
• Previous exposure to IT Audit, Internal Audit, External Audit or Technology Risk is highly desirable.
• Fluent English; German and/or French is an advantage.
• Willingness to travel internationally around 20 days or more per year.

Required skills

• Strong practical knowledge of network security, identity and access management, vulnerability management, security operations or IT resilience.
• Experience with security assessments, penetration testing results, vulnerability scanning tools or similar.
• Certifications such as CISA, CISM or CISSP are an advantage.
• Interest in AI and machine learning, with practical AI governance experience beneficial.

What we offer

• A highly visible position with direct exposure to senior stakeholders.
• Broad scope across technology, cybersecurity and emerging risk areas.
• Opportunities for continuous professional development, specialist training and certifications.