Senior IT & Cybersecurity Auditor

We are currently looking for an experienced Senior IT & Cybersecurity Auditor to join an international financial services environment and contribute to strengthening its technology, cybersecurity and risk management landscape.

In this role, you will combine your technical expertise with a strong understanding of governance, risk and controls. You will take ownership of complex audit engagements, challenge existing practices and provide independent insights that support informed decision-making at senior management level.

This is an excellent opportunity for a technically experienced professional who enjoys investigating complex IT environments, identifying potential vulnerabilities and making a meaningful impact on the organisation’s security and resilience.

Responsibilities & Tasks

• Plan, lead and deliver comprehensive IT audit engagements based on a risk-oriented approach, including the development of audit strategies and testing procedures.

• Review and evaluate technology-related risk areas, including cybersecurity, IT governance, infrastructure, network security, access management, data protection, operational resilience and emerging technologies.

• Apply your technical background to analyse complex IT architectures, identify potential weaknesses and assess the effectiveness of existing security measures and internal controls.

• Review findings from penetration tests, vulnerability scans, security assessments and monitoring activities, translating technical observations into relevant risk insights.

• Assess emerging technologies, particularly Artificial Intelligence and AI-driven solutions, and evaluate their implications for cybersecurity, governance and technology risk.

• Present audit findings, recommendations and risk assessments to relevant stakeholders, including senior management and executive-level decision-makers.

• Prepare structured and impactful audit documentation, ensuring that identified issues are clearly communicated and actionable.

• Track remediation activities and evaluate the effectiveness of implemented measures.

• Work closely with colleagues across IT, Cybersecurity, Risk Management, Governance and Business functions to promote continuous improvement and strengthen the overall control environment.

Requirements & Qualifications

• Degree in Computer Science, Information Technology, Information Systems or a comparable discipline, alternatively equivalent professional experience.

• At least 10 years of relevant professional experience in IT, Cybersecurity, Information Security, Technology Risk or a related technical field.

• Strong practical knowledge of several core technology and security domains, such as Network Security, Identity and Access Management, Vulnerability Management, Security Operations or IT Resilience.

• Experience working with technical security assessments, penetration testing results, vulnerability scanning solutions or comparable security tools.

• Previous exposure to IT Audit, Internal Audit, External Audit, Technology Risk or another assurance-related function is highly desirable.

• Professional certifications such as CISA, CISM, CISSP or equivalent qualifications are considered an advantage.

• Interest in Artificial Intelligence, machine learning and AI-driven technologies, particularly in relation to security, governance and risk management. Practical experience in AI governance or AI-based solutions is beneficial.

• Strong analytical capabilities, a structured approach to problem-solving and the ability to assess complex technical information independently.

• Excellent communication and stakeholder management skills, with the confidence to challenge established practices constructively and engage with senior decision-makers.

• High professional integrity, sound judgement and a strong sense of responsibility.

• Fluent English is required. German and/or French language skills are an additional advantage.

• Willingness to undertake international business travel, approximately 20 days or more annually.

Benefits & Culture

• Work in an international financial services environment where technology, security and risk management play a central role.

• Take on a highly visible position with direct exposure to senior stakeholders and strategic decision-making.

• Enjoy a broad and varied scope of responsibility across technology, cybersecurity and emerging risk areas.

• Collaborate with experienced professionals from IT, Business, Risk and Governance in a supportive and knowledge-driven environment.

• Benefit from opportunities for continuous professional development, specialist training and relevant industry certifications.

• Contribute to meaningful initiatives that strengthen organisational security, resilience and governance.

• Join a professional culture that values integrity, initiative, collaboration and individual expertise.