(Senior) IT Auditor (f/m/d)

<p>Your area of work: <br/> You will be responsible for planning and execution of risk-oriented IT audit reviews with regard to compliance, security and efficiency of systems and processes. Your analysis and evaluation of audit areas, the identification of deficiencies in the internal control system as well as the enforcement of implementation of your audit recommendations will contribute to improving the risk situation of Clearstream Banking and Deutsche Börse Group.</p> <p><br/> Your responsibilities: </p> <ul> <li>Support in the planning and structuring of IT audit scope and their risk assessment</li> <li>Independent preparation and execution of audits with an IT focus/IT components, as well as participation in Deutsche Börse Group coordinated audits</li> <li>Identification of deficiencies and improvement opportunities as well as development of pragmatic approaches to solve problems</li> <li>Support the creation of audit reports and communication of the results to the responsible line management in the audited areas</li> <li>Active participation in shaping the audit methodology and processes as well as support of risk-based audit planning</li> <li>Advising and supporting the specialist auditing department in connection with general audits and, if necessary, preparing and carrying out such audits independently and on your own responsibility</li> <li>Validation of regulatory IT finding remediation measures</li> <li>Support line management or key IT projects and provide audit related consultancy in the proposal for and implementation of adequate internal controls</li> <li>Participate in pooled audits of DBG’s cloud service providers together with other European financial institutions as part of the Collaborative Cloud Audit Group (CCAG)</li> </ul> <p> <br/> Your profile: </p> <ul> <li>University degree in (business-) informatics or economics</li> <li>At least three years of professional experience: practical auditing experience, preferably in the financial environment and with an IT connection; alternatively, operational activity in IT</li> <li>Proven knowledge of common IT standards such as ITIL, COBIT, BSI Grundschutz and the ISO/IEC 27000 27000 series; as well as professional certifications, e.g. CIA, CISA, ISO CISSP a plus</li> <li>IT knowledge, e.g. in networks, operating systems, IT security, SDLC desirable</li> <li>High analytical skills, methodical knowledge and conceptual understanding, e.g. processes in IT organizations, management and IT projects, network technology, system architectures as well as IT security management and technologies</li> <li>Initiative, independent and goal-oriented approach to work</li> <li>Communication and organisational skills, resilience, assertiveness, competent and appearance</li> <li>Confidence to interact with high level stakeholder and ability to make recommendations in the face of complex, conflicting and ambiguous circumstances</li> <li>High level of proficiency in both written and spoken English<br/>  </li> </ul>