• Successfully participate in the planning, execution and completion of audits following a risk based methodology in line with Division and Industry Standards as well as regulatory requirements, support recommendations for internal control improvements and preparation of audit reports providing clear messages on key risks and key audit issues.
• Participate in the planning, assessment, testing and reporting phases of audits covering IT governance, systems infrastructure, information security, application controls, and operational activities.
• Perform independent and objective assessments of risks and controls to improve risk management practices and assess controls for compliance with laws, regulations, company policies and business needs.
• Prepare or review documentation of audit work in adherence with the division’s risk-based audit methodology and industry standards
• Establish strong relationships within the Corporate Audit function.
• Develop a good understanding and knowledge base of the company’s operations and establish effective business relationships within the company
• Gain and apply a thorough understanding of audits and assigned functions, including utilization of technology and active usage of Data Analytics.
• Demonstrate, maintain and expand your knowledge of financial and operational internal control methodologies and terminologies (e.g. COSO, COBIT), process and control industry standards, audit industry best practices and regulatory expectations, risk management practices and techniques as well as supervisory regulatory requirements such as European Central Bank (ECB) and Ba Fin.

• A high degree of professionalism, professional curiosity and skepticism, organizational, analytical and project management skills.
• Strong written and verbal communication, interpersonal, presentation and organizational skills.
• Ability to work independently in an international team across multiple locations with global stakeholders.
• Thorough knowledge of the European regulatory environment applicable to financial institutions and proven ability to research, interpret and apply regulatory requirements.
• Fluency in English – written and spoken. Good German level is highly appreciated

• University degree in economics, Information Technology, business administration or related field.
• 3-5 years of experience in auditing technology-related areas such as e.g. Enterprise security control frameworks, IT incident and problem management, Automated business process controls, IT Resilience and Disaster Recovery, Identity and Access Management / Privileged Access Management/Adaptive Authentication Solutions, change management, Perimeter/Internal Security Technologies (Firewalls, Intrusion Detection and Prevention Systems)
• Interest in obtaining or already holding industry-recognized certifications (e.g. CISA, CISSP, CISM, etc.).

• Willingness to travel, mostly within Europe.