IT Audit & Controls Reviewer (IT Auditor)

Quick Facts

• Risk-based IT audits of IT controls
• Compliance review for legal, regulatory, and internal IT requirements
• Audit reporting with recommendations and remediation follow-up

Description

You will conduct risk-based IT audits to evaluate the adequacy and effectiveness of IT controls, and analyze IT risks, weaknesses, and potential threats in complex IT environments. The role includes reviewing compliance with legal, regulatory, and internal IT requirements, covering IT governance, security, access, emergency/BCP, and outsourcing processes, and producing audit reports with actionable recommendations. You will track the implementation of agreed corrective measures and collaborate closely with internal IT and business units.

Responsibilities

• Conduct risk-oriented IT audits to assess adequacy and effectiveness of IT controls
• Analyze and evaluate IT risks, vulnerabilities, and potential threats
• Verify compliance with legal, supervisory, and internal requirements in the IT environment
• Assess IT governance, IT security, access, emergency and outsourcing processes
• Create meaningful audit reports and traceable recommendations to reduce risk and improve processes
• Follow up on the implementation of agreed measures
• Work closely with internal specialist departments, IT units, and—when needed—external partners
• Perform IT-revision reviews of data, systems, and business processes
• Focus on risks relating to security, efficiency, proper conduct, and process suitability
• Develop proposals to optimize the internal control system and IT processes
• Support continuous knowledge building for group audit through IT-specific assistance
• Support the acquisition and maintenance of relevant IT and audit certifications

Requirements

• Completed degree in Computer Science, Business Informatics, or a comparable field
• Relevant experience in IT auditing or IT governance (ideally in the insurance industry)
• Sound knowledge of IT security standards, frameworks, and processes (COBIT, ISO 27001, ITIL)
• Understanding of regulatory and supervisory requirements in the IT context
• Analytical thinking, attention to detail, and strong problem-solving skills
• Ability to communicate complex technical topics clearly to stakeholders
• Independent, integrity-oriented approach and confident demeanor with specialist and leadership teams
• Strong communication and presentation skills in German and English

Benefits

• 30 days of vacation
• Flexible working hours
• Mobile work at least 2 days per week
• Modern, agile working environment
• Numerous trainings via a training platform
• Discounts with 100+ companies
• Benefits on insurance contracts and products of related financial subsidiaries