Senior IT Auditor

About the role

We are looking for a Senior IT Auditor to lead comprehensive IT and data‑privacy audits across all company locations, ensuring compliance with Internal Auditing Standards (IIA) and protecting our information assets.

Key responsibilities

• Plan and execute scheduled, ad‑hoc and focused IT and data‑privacy audits, including review of penetration testing, vulnerability scanning and security audits.
• Prepare audit working papers, files and data‑driven audit reports with clear recommendations for the Head of Internal Audit.
• Test IT applications, infrastructure and data‑privacy controls such as access management and encryption, identifying critical gaps.
• Document process gaps and control weaknesses, monitor IT risk profiles and contribute to GRC policy updates.
• Follow‑up with responsible teams to ensure implementation of audit recommendations.
• Participate in IT projects, product development and system upgrades to identify risks and advise on appropriate controls.
• Assess GRC frameworks, IT governance policies and compliance controls against industry standards.
• Conduct social engineering assessments, phishing simulations and support secure SDLC practices.
• Provide advisory services to Risk Management & Compliance functions and report risk positions to the Head of IT Audit.

Required profile

• 5–10 years of progressive experience in IT audit, risk management, cybersecurity or compliance.
• University degree (any discipline).
• Experience in an audit or accounting firm, preferably within manufacturing or financial services.
• Proven experience auditing systems, applications and information assets.

Required skills

• Penetration testing
• Vulnerability scanning
• Security audit
• Access management
• Encryption
• Social engineering assessments
• Phishing simulations
• Secure software development lifecycle (SDLC)
• GRC frameworks

What we offer

• Opportunity to influence IT risk posture across a global organization.
• Collaboration with senior leadership and cross‑functional teams.
• Professional development in audit, cybersecurity and governance.