Job
- Level
- Experienced
- Job Field
- IT, Security, Test/QA
- Employment Type
- Full Time
- Contract Type
- Permanent employment
- Location
- Frankfurt
- Working Model
- Onsite
Job Summary
In this role, you will plan and execute risk-oriented IT audits, analyze security systems and processes, identify weaknesses, and develop strategic solutions to enhance cyber security across the organization.
Job Technologies
Your role in the team
- In your new position, you will assume responsibility for planning and execution of risk-oriented IT audits with respect to compliance, security, and efficiency of systems and processes.
- Your analysis and evaluation of the areas examined, the identification of deficiencies within the internal control system, as well as the successful implementation of your recommendations, will contribute to improving the company's risk exposure.
- You will additionally bring a cyber security perspective to audit work, helping to identify and assess cyber-related risks across the organisation's technology landscape.
- Support in planning and structuring of IT audit areas and their risk assessment, including the assessment of cyber security risks.
- Independent preparation and execution of IT audits as well as participating in IT audits, with a focus on security controls and cyber resilience where applicable.
- Identification of deficiencies and improvement opportunities - including vulnerabilities in cyber security controls - as well as development of pragmatic approaches to solve problems.
- Assistance with creation of audit reports and communication of results to responsible line management in the audited areas.
- Active participation in shaping the audit methodology and processes as well as support of risk-based audit planning, incorporating cyber security frameworks and threat intelligence where relevant.
- Consultation and support of general audits and potentially independent planning and execution of those audits.
- Audit-related consulting and support to business units, including guidance on cybersecurity best practices and control effectiveness.
- Follow-up of audits and derived recommendations and support of IT projects from an audit and cyber security perspective.
This text has been machine translated. Show original
Our expectations of you
Education
- Bachelor's or master's degree, preferably in computer science, AI, data analytics, cyber security, or equivalent.
Qualifications
- Strong knowledge of the financial sector; knowledge of clearing processes is an advantage.
- Preferably, you hold professional certifications, e.g., CIA, CISA, CISSP, CISM, or CEH, and have knowledge of established IT and security regulations and standards such as DORA, ITIL, COBIT, BSI IT-Grundschutz, ISO 27001, and NIST CSF.
- High analytical skills, quick conceptual understanding of complex matters and thinking outside the box.
- Initiative, autonomous and goal-oriented working style, paired with strong interpersonal skills, clear communication, organisational talent, and ability to work under pressure.
- High level of proficiency in written and spoken English; German is a plus.
Experience
- Must have 3+ years of professional experience in Internal Audit in EU financial services.
- Hands-on experience in the management of audits, preferably in the banking sector; alternatively, operational experience in IT or cyber security.
- Practical experience in cyber security, such as vulnerability assessment, penetration testing concepts, security operations, incident response, and related tooling.
- Experience and knowledge in using AI and data analytics in an audit context are beneficial.
- Experience and knowledge in project management, data analytics, and audit software.
This text has been machine translated. Show original
Topics You Will Work On
Job Locations
About Your Employer
Eurex Clearing AG
Eurex Clearing bedient rund 200 Clearing-Mitglieder in 19 Ländern, verwaltet einen Sicherheitspool von 49 Milliarden Euro und Clearing-Geschäfte im Wert von 11 Billionen Euro pro Monat.
Description
- Company Type
- Established Company
- Working Model
- Hybrid, Onsite
- Industry
- Banking, Finance, Insurance