Internal Audit SME – Third-Party Risk Management & Vendor Assurance

About the role

We are seeking an Internal Audit Subject Matter Expert to provide independent assurance over the Group’s end‑to‑end management of third‑party relationships, outsourcing arrangements and critical ICT service providers. You will work across business, technology, procurement, risk, legal and compliance while maintaining audit independence.

Key responsibilities

• Lead and deliver complex internal audits covering third‑party risk management, outsourcing and vendor assurance across the full lifecycle.
• Assess governance, controls and compliance with DORA and EBA expectations for ICT and outsourcing risk.
• Review identification, classification and oversight of providers supporting critical or important functions.
• Evaluate provider‑level controls, contractual protections, service performance, security, resilience and exit arrangements.
• Contribute specialist expertise to audit methodology, risk assessment, thematic reviews and follow‑up of significant findings.

Required profile

• At least 7 years of experience in internal audit, TPRM, outsourcing, technology risk or related fields.
• Practical experience across the entire third‑party lifecycle, from initiation and due diligence to monitoring, renewal and exit.
• Working knowledge of DORA and applicable EBA outsourcing and ICT risk‑management expectations.
• Excellent written and verbal English communication skills.

Required skills

• SOC 1 and SOC 2 assurance frameworks.
• ISAE 3402 audit standards.
• ISO 27001 information security standard.
• Experience with cloud, financial technology and core banking service providers.

What we offer

• Competitive salary ranging from EUR 4,310 to EUR 6,080 gross per month.
• Performance‑based bonuses, health insurance, pension scheme, additional days off and flexible working hours.
• Modern infrastructure and opportunities to influence the bank’s culture and processes.