> Markdown version of [/jobs/ext/1432562-senior-it-auditor-technology-data-and-ai-at-allianz-se](https://www.wearedevelopers.com/jobs/ext/1432562-senior-it-auditor-technology-data-and-ai-at-allianz-se). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior IT Auditor - Technology, DATA and AI at Allianz SE - **Company:** Allianz SE - **Location:** München, Germany - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Agile Methodology, Artificial Intelligence, Amazon Web Services, Data Analysis, Microsoft Azure, Cloud Computing, Cloud Computing Security, Control Objectives for Information and Related Technology (COBIT), Cyber Security, Information Systems, Data Governance, Identity and Access Management, Information Technology Audit, IT Management, Information Systems Security Architecture Professional, Python (Programming Language), Machine Learning, Power BI, SQL Databases, Software Vulnerability Management, Google Cloud, Large Language Models, Model Validation, Generative AI, Information Technology, Data Lineage, Data Analytics, Data Management, Machine Learning Operations, GPT - **Published:** July 25, 2026 - **Apply:** https://www.adzuna.de/details/5814268636 ## About the Role The successful candidate will contribute to the efficiency, productivity and success of Allianz Internal Audit. Solid skills in technology topics coupled with strong emotional intelligence and uncompromised integrity is fundamental to each auditor's success. Group Audit is seeking candidates who are bold thinkers with entrepreneurial spirit and a commitment to continuous learning., * Have a Master's degree in Information Technology, Computer Science, Information Security, Data Science, Business Informatics, or a related field - or equivalent professional experience * Have a minimum of 6 years of experience in IT auditing or IT risk management, preferably within the financial services industry, with demonstrable expertise in at least two of the following domains: cybersecurity, cloud computing, AI/ML systems, data governance, or enterprise IT risk * Have a strong understanding of technology risks, control frameworks, and leading industry practices, including COBIT, NIST CSF, ISO 27001/27002, ITIL, or cloud security frameworks such as CSA CCM * Have a foundational understanding of Artificial Intelligence and Machine Learning concepts, including model risk, AI governance frameworks, and the EU AI Act * Are familiar with relevant technology regulations and standards applicable to the financial services industry, including DORA, EBA ICT/Security Guidelines, and GDPR * Have a good understanding of auditing principles and techniques, as well as risk management concepts * Are proficient in using audit management software (e.g., ACL/Galvanize, TeamMate+), and data analysis tools such as Power BI, Python, or SQL as well AI/LLM systems and agents (e.g. MS CoPilot, Open AI ChatGPT; Anthropic Claude) * Demonstrate a high level of integrity, reliability, and responsibility * Are open to change and new technical developments - adaptive, innovative, and agile * Have a passion for people, are collaborative, empathetic, solution-oriented, and curious * Demonstrate ownership, work independently, prioritize tasks, and meet deadlines in a fast-paced and dynamic environment * Have strong analytical skills with the ability to identify risks, evaluate controls, and provide practical recommendations * Have strong communication skills in English, with the ability to articulate complex technical concepts in a clear and concise manner * Are open to travel as required, * Audit & Risk Certifications: CISA (Certified Information Systems Auditor), CIA (Certified Internal Auditor), CRISC (Certified in Risk and Information Systems Control), AAIA (Advanced in AI Audit) * Security Certifications: CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager) * Cloud Certifications: CCSP (Certified Cloud Security Professional), AWS/Azure/GCP professional-level certifications * Data & Privacy: CDPSE (Certified Data Privacy Solutions Engineer) * AI Governance: Familiarity with AI governance frameworks such as NIST AI RMF or ISO 42001 * Regulatory Expertise: Hands-on experience with DORA (Digital Operational Resilience Act) implementation or compliance assessments * Professional Background: Experience in a Big 4 or equivalent professional services IT audit practice * Previous experience in insurance or asset management business functions, consulting, digital / tech is a plus * Experience applying ChatGPT, Generative AI, and Ethical AI solution ## Description As Senior IT Auditor, you will lead and execute technology audits across a broad and evolving risk landscape. Your key responsibilities include: * Technology & IT Audits: Plan, design, lead and execute technology-specific audits covering technology systems, IT infrastructure, IT projects and environments - evaluating the effectiveness of controls and risk management practices * Artificial Intelligence & Machine Learning: Lead audits of AI and ML systems, assessing model governance, explainability, bias controls, data quality, and compliance with applicable AI regulations, including the EU AI Act * Cloud Computing: Audit cloud environments (e.g., AWS, Azure, GCP), evaluating cloud governance, security configurations, resilience, cost controls, and compliance with internal policies and regulatory requirements * Cybersecurity & Information Security: Assess the design and effectiveness of cybersecurity controls, including identity and access management, vulnerability management, incident response, and third-party and supply chain risk * Data Governance & Management: Conduct audits of data governance frameworks, including data quality, data lineage, master data management, and compliance with data privacy regulations such as GDPR * Regulatory Compliance: Assess compliance with relevant regulatory requirements and technology-related frameworks (e.g., DORA, EBA ICT/Security Guidelines, NIST, ISO 27001/27002) and support the organization in managing regulatory findings * Risk Identification: Identify risk-focused audit areas, assess business processes, workflows, transactions, and control frameworks to determine deficiencies and vulnerabilities * Data-Driven Auditing: Leverage data analytics, automation, and AI-assisted audit techniques to enhance audit coverage, improve efficiency, and deliver deeper insights * Reporting & Documentation: Analyze audit results, formulate clear and actionable recommendations, lead closing meetings with auditees, and take responsibility for writing comprehensive audit reports and following up on the implementation of agreed actions * Stakeholder Management: Manage relationships with auditees, handling challenging situations and delivering conclusions in a diplomatic and professional manner. Communicate effectively with stakeholders at all levels of the organization, providing timely updates on audit progress and outcomes * Knowledge Sharing: Develop strong business relationships and encourage knowledge sharing within the global Internal Audit community to identify and implement business and technology solutions, When we do work with recruitment agencies, that engagement is formalized by a contract. Fees will only be paid when there is a contract in place. Without a contract in place, we will not accept invoices on unsolicited resumes, even if the candidate was ultimately employed by Allianz. ## Related Videos - [Enjoying SQL data pipelines with dbt](https://www.wearedevelopers.com/videos/823-enjoying-sql-data-pipelines-with-dbt) - [The Missing Layer Between Enterprise Data and AI Agents](https://www.wearedevelopers.com/videos/100286-the-missing-layer-between-enterprise-data-and-ai-agents) - [ Evaluating AI models for code comprehension](https://www.wearedevelopers.com/videos/1462-evaluating-ai-models-for-code-comprehension) - [REST, GraphQL, gRPC, and more: A comparison of modern API styles](https://www.wearedevelopers.com/videos/100247-rest-graphql-grpc-and-more-a-comparison-of-modern-api-styles) - [The New Financial Stack: AI, Agents and Trust](https://www.wearedevelopers.com/videos/100002-the-new-financial-stack-ai-agents-and-trust) - [Streaming AI Responses in Real-Time with SSE in Next.js & NestJS](https://www.wearedevelopers.com/videos/1630-streaming-ai-responses-in-real-time-with-sse-in-next-js-nestjs) ## Related Articles - [Data Analyst Salary Germany](https://www.wearedevelopers.com/magazine/277-data-analyst-salary-germany) - [IT Salaries in Germany](https://www.wearedevelopers.com/magazine/287-it-salaries-in-germany) - [The Biggest German Tech Companies](https://www.wearedevelopers.com/magazine/424-the-biggest-german-tech-companies) - [Where to Find German Tech Jobs](https://www.wearedevelopers.com/magazine/366-where-to-find-german-tech-jobs) - [System change: restart as developer?](https://www.wearedevelopers.com/magazine/39-system-change-restart-as-developer) - [Best Coding Boot Camps in Germany](https://www.wearedevelopers.com/magazine/237-best-coding-boot-camps-in-germany)