IT Auditor
Role details
Job location
Tech stack
Job description
- 30% Planning, designing, and conducting operational IT audits
- 30% Identifying and evaluating operational IT risks
- 20% Collaborating with stakeholders
- 20% Monitoring the implementation of corrective actions and staying updated
Vacancy
As an IT Auditor at Mizuho, you are responsible for evaluating the efficiency, effectiveness, and security of the IT systems and processes within a Japanese bank and its branches. You play a crucial role in planning, designing, and executing operational IT audits, ensuring compliance with internal policies and legal requirements. You assess the effectiveness of IT systems, applications, and infrastructure while identifying potential risks and vulnerabilities. Additionally, you develop risk-based audit programs and prepare detailed reports with actionable recommendations to enhance system controls and data security.
You work closely with IT management, external auditors, and cross-functional teams to ensure that audit findings are understood and addressed. You also present audit results and recommendations to the board of directors, providing expert advice on IT-related risks. In this role, you stay updated on industry trends and mentor junior auditors, helping them develop their skills and learn from your expertise.
The Internal Audit Department consists of four members: the IT Auditor, the Senior Operational Auditor, the Head of Internal Audit, and a Junior Auditor. This team has a strong focus on improving operational efficiency and minimizing risks through thorough evaluations of (IT) processes.
Requirements
- Bachelor's or Master's degree in Information Technology, Computer Science, Information Systems, or a related field
- A minimum of 3-5 years of experience in IT auditing, IT security, or IT governance.
- Knowledge of internal controls, risk management, or process improvement methodologies
- Professional certifications such as CISA (Certified Information Systems Auditor), CISSP (Certified Information Systems Security Professional), CRISC (Certified in Risk and Information Systems Control) or RE
- Strong knowledge of IT systems, security frameworks, and regulatory standards (SOX, GDPR, COBIT, ISO 27001), combined with excellent analytical and risk assessment skills
- Excellent command of the English language, both verbally and in writing
- Ability to explain complex IT concepts to non-technical stakeholders, work independently and in teams, and travel for on-site audits, If you enjoy delving into technical complexity and thinking critically to solve problems, and you don't mind working under pressure and meeting deadlines, then this is the job for you.
Benefits & conditions
- €62,000 - €85,000 gross p/y (depending on knowledge and experience) including 13th month and holiday allowance
- Annual bonus, depending on performance
- 37.5 hour workweek
- 30 vacation days (based on full time employment)
- Technical and professional training possibilities
- 100% company paid defined contribution pension plan
- Phone, laptop, remote work, work from abroad and full reimbursement for public transport