We are currently looking for an experienced Senior IT & Cybersecurity Auditor to join an international financial services environment and contribute to strengthening its technology, cybersecurity and risk management landscape.
In this role, you will combine your technical expertise with a strong understanding of governance, risk and controls. You will take ownership of complex audit engagements, challenge existing practices and provide independent insights that support informed decision-making at senior management level.
This is an excellent opportunity for a technically experienced professional who enjoys investigating complex IT environments, identifying potential vulnerabilities and making a meaningful impact on the organisation’s security and resilience.
Plan, lead and deliver comprehensive IT audit engagements based on a risk-oriented approach, including the development of audit strategies and testing procedures.
Review and evaluate technology-related risk areas, including cybersecurity, IT governance, infrastructure, network security, access management, data protection, operational resilience and emerging technologies.
Apply your technical background to analyse complex IT architectures, identify potential weaknesses and assess the effectiveness of existing security measures and internal controls.
Review findings from penetration tests, vulnerability scans, security assessments and monitoring activities, translating technical observations into relevant risk insights.
Assess emerging technologies, particularly Artificial Intelligence and AI-driven solutions, and evaluate their implications for cybersecurity, governance and technology risk.
Present audit findings, recommendations and risk assessments to relevant stakeholders, including senior management and executive-level decision-makers.
Prepare structured and impactful audit documentation, ensuring that identified issues are clearly communicated and actionable.
Track remediation activities and evaluate the effectiveness of implemented measures.
Work closely with colleagues across IT, Cybersecurity, Risk Management, Governance and Business functions to promote continuous improvement and strengthen the overall control environment.
Degree in Computer Science, Information Technology, Information Systems or a comparable discipline, alternatively equivalent professional experience.
At least 10 years of relevant professional experience in IT, Cybersecurity, Information Security, Technology Risk or a related technical field.
Strong practical knowledge of several core technology and security domains, such as Network Security, Identity and Access Management, Vulnerability Management, Security Operations or IT Resilience.
Experience working with technical security assessments, penetration testing results, vulnerability scanning solutions or comparable security tools.
Previous exposure to IT Audit, Internal Audit, External Audit, Technology Risk or another assurance-related function is highly desirable.
Professional certifications such as CISA, CISM, CISSP or equivalent qualifications are considered an advantage.
Interest in Artificial Intelligence, machine learning and AI-driven technologies, particularly in relation to security, governance and risk management. Practical experience in AI governance or AI-based solutions is beneficial.
Strong analytical capabilities, a structured approach to problem-solving and the ability to assess complex technical information independently.
Excellent communication and stakeholder management skills, with the confidence to challenge established practices constructively and engage with senior decision-makers.
High professional integrity, sound judgement and a strong sense of responsibility.
Fluent English is required. German and/or French language skills are an additional advantage.
Willingness to undertake international business travel, approximately 20 days or more annually.
Work in an international financial services environment where technology, security and risk management play a central role.
Take on a highly visible position with direct exposure to senior stakeholders and strategic decision-making.
Enjoy a broad and varied scope of responsibility across technology, cybersecurity and emerging risk areas.
Collaborate with experienced professionals from IT, Business, Risk and Governance in a supportive and knowledge-driven environment.
Benefit from opportunities for continuous professional development, specialist training and relevant industry certifications.
Contribute to meaningful initiatives that strengthen organisational security, resilience and governance.
Join a professional culture that values integrity, initiative, collaboration and individual expertise.