Who we are looking for
State Street Bank International GmbH is looking for an IT Audit Manager, Assistant Vice President, who will be responsible for managing and performing audits covering IT governance, systems infrastructure, information security, application controls, operational and oversight monitoring activities and ensure compliance with the division’s risk-based audit methodology. This role will primarily focus on participation in global IT audit engagements considering legal entity aspects and local regulatory requirements.
You will be part of a team of approximately 380 professionals globally, and you will be responsible for providing independent, objective assurance and advisory services designed to add value, minimize risk and improve the overall control environment of State Street Corporation and its subsidiaries. You will interact and communicate regularly with executive management and have tremendous insight into all parts of the company’s daily operations.
The role can be based out of Krakow (Poland), Frankfurt/Munich (Germany), Milan (Italy),or Luxembourg.
This role can be performed in a hybrid model, where you can balance work from home and office to match your needs and role requirements. Depending on the location, the expectation is about 3 days per week on site, 2 days remotely.
Why this role is important to us
The team you will be joining plays an important role in the overall success of the organization. Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. To make that happen we need teams like yours to help navigate employees and the organization as a whole. In your role you will strive for cutting-edge solutions, that are straightforward and scalable. You will help us build resilience and execute day to day deliverables at our best. Join us if making your mark in the financial services industry from day one is a challenge you are up for.
What you will be responsible for
As IT Audit Manager, Assistant Vice President you will
1. Work as part of an international team with global stakeholders in new and changing situations where there may not always be a readily apparent solution.
2. Manage the planning, assessment, testing and reporting phases of audits covering IT governance, systems infrastructure, information security, application controls, and operational activities.
3. Perform independent and objective assessments of risks and controls to improve risk management practices.
4. Assess systems and supporting controls for compliance with laws, regulations, company policies and meet business needs.
5. Recommend control improvements to mitigate key risks.
6. Maintain a thorough knowledge of ECB and BaFin regulatory requirements (for example DORA, EBA Guidelines on Outsourcing)
7. Influence change and provide insights on business initiatives, including system implementations.
8. Prepare or review audit workpapers to ensure compliance with the division’s risk-based audit methodology.
9. Supervise, coach and develop staff, helping to build technology audit skills across the Corporate Audit division.
10. Use your excellent writing skills to succinctly communicate complicated technical issues in business terms.
11. Prepare audit reports and present key findings to senior level management.
What we value
These skills will help you succeed in this role
12. Experience leading and supervising project teams, preferably in an audit or assurance capacity within the financial services industry.
13. Proficient or knowledgeable in evaluating and testing internal controls and in applying a risk-based audit approach.
14. Ability to effectively prioritize multiple tasks and work independently in an international team across multiple locations with global stakeholders in a fast paced environment as well as to manage complex nonroutine situations while multi-tasking
15. Professional curiosity and willingness to learn new technologies and processes.
16. Strong analytical, interpersonal, organizational, research, and communication (verbal and written) skills.
17. Good understanding of the role of first, second and third line of defense.
18. Fluency in English - written and spoken.
Education & Preferred Qualifications
19. University degree in Information Systems, Computer Science, Accounting or related field; Advanced degree in Information Technology, Cyber Security or Systems Engineering preferred.
20. Currently hold one or more industry recognized certifications (e.g. CISA, CRISC, CISM, CISSP, Cloud+, etc.) and a willingness to continue to learn and grow.
21. 5+ years of auditing technology-related areas such as:
IT Resilience / Data Replication / Disaster Recovery
Identity and Access Management/Privileged Access Management/Adaptive Authentication Solutions
IT Change Management
IT incident and problem management
Security Incident and Event Management (SIEM) Technologies
Cyber Incident and response
Enterprise security controls frameworks
Cloud Security
Financial services operational processes and technology
Automated business process controls
Additional requirements
22. Willingness to travel up to 20% annually.
23. Knowledge of German or Italian language will be considered a plus.
It is a requirement for the candidate in Italy to be enrolled to list 69/99.
State Street's Speak Up Line
Załącznik do standardu Whistleblowing i Speak Up SSBI GmbH dla Oddziału w Polsce