Internal Audit SME – Technology, DORA & Digital Resilience

About the role

We are looking for an Internal Audit Subject Matter Expert (Technology, DORA and Digital Resilience) to join our Internal Audit team. You will provide independent assurance over the Group's technology governance, ICT risk management, digital operational resilience, technology architecture and major technology‑enabled transformation.

Key responsibilities

• Lead and deliver complex internal audits covering technology governance, ICT risk, cybersecurity and digital operational resilience.
• Assess compliance with DORA and evaluate the design and effectiveness of ICT risk‑management, incident‑management, resilience‑testing and continuity arrangements.
• Review technology architecture, cloud and infrastructure controls, identity and access management, software development, change management and cybersecurity controls.
• Provide independent assurance over major technology‑enabled transformations, including core banking, cloud migration and critical system implementations.
• Analyse technical evidence, identify root causes and communicate their governance, operational and business implications to senior stakeholders.
• Contribute specialist expertise to the Internal Audit methodology development, risk assessment, audit planning, thematic reviews and development of technology‑enabled audit approaches.

Required profile

• At least 7 years of experience in technology audit, ICT risk, cybersecurity, operational resilience, technology governance, systems implementation or technology supervision.
• Experience leading complex technology audits in a regulated environment.
• Strong knowledge of ICT governance, DORA, cybersecurity, cloud and infrastructure risk, software change, resilience and major system implementations.
• Ability to interpret technical evidence and communicate its governance and business implications.
• Excellent English communication skills – written and verbal.
• University degree in IT, computer science, cybersecurity, engineering, risk management or a related discipline (preferred).

Required skills

• CISA
• CISSP
• CRISC
• CIA
• CISM
• ISO 27001 auditor
• NIST framework
• COBIT
• ITIL
• Data analytics
• Scripting
• Cloud security
• Automated control testing

What we offer

• Competitive compensation: EUR 4,310 – EUR 6,080 gross per month.
• Performance bonuses based on bank, team and individual results.
• Health insurance, pension savings programme, additional days off and flexible working hours.
• Modern infrastructure and opportunities to shape the bank’s culture.
• Supportive manager and a culture that values independence, curiosity and initiative.