Overview
State Street Bank International GmbH is looking for an IT Audit Manager, Assistant Vice President, who will be responsible for managing and performing audits covering IT governance, systems infrastructure, information security, application controls, operational and oversight monitoring activities and ensure compliance with the division's risk-based audit methodology. This role will primarily focus on participation in global IT audit engagements considering legal entity aspects and local regulatory requirements. You will be part of a team of approximately 380 professionals globally, providing independent, objective assurance and advisory services designed to add value, minimize risk and improve the overall control environment of State Street Corporation and its subsidiaries. The role may be based in Krakow (Poland), Frankfurt/Munich (Germany), Milan (Italy), or Luxembourg, and can be performed in a hybrid model (approximately 3 days on site and 2 days remote, depending on location).
The position involves regular interaction with executive management and offers visibility into all parts of the company’s daily operations.
Responsibilities
* Work as part of an international team with global stakeholders in new and changing situations where there may not always be a readily apparent solution.
* Manage the planning, assessment, testing and reporting phases of audits covering IT governance, systems infrastructure, information security, application controls, and operational activities.
* Perform independent and objective assessments of risks and controls to improve risk management practices.
* Assess systems and supporting controls for compliance with laws, regulations, company policies and meet business needs.
* Recommend control improvements to mitigate key risks.
* Maintain a thorough knowledge of ECB and BaFin regulatory requirements (e.g., DORA, EBA Guidelines on Outsourcing).
* Influence change and provide insights on business initiatives, including system implementations.
* Prepare or review audit workpapers to ensure compliance with the division's risk-based audit methodology.
* Supervise, coach and develop staff, helping to build technology audit skills across the Corporate Audit division.
* Use excellent writing skills to succinctly communicate complicated technical issues in business terms.
* Prepare audit reports and present key findings to senior level management.
What We Value
* Experience leading and supervising project teams, preferably in an audit or assurance capacity within the financial services industry.
* Proficiency in evaluating and testing internal controls and applying a risk-based audit approach.
* Ability to prioritize multiple tasks and work independently in an international team across locations with global stakeholders in a fast-paced environment.
* Professional curiosity and willingness to learn new technologies and processes.
* Strong analytical, interpersonal, organizational, research, and communication skills (verbal and written).
* Good understanding of the role of first, second and third line of defense.
* Fluency in English – written and spoken.
Education & Preferred Qualifications
* University degree in Information Systems, Computer Science, Accounting or related field; Advanced degree in Information Technology, Cyber Security or Systems Engineering preferred.
* Industry certifications (e.g., CISA, CRISC, CISM, CISSP, Cloud+, etc.) and a willingness to continue learning.
* 5+ years of auditing technology-related areas such as:
o IT Resilience / Data Replication / Disaster Recovery
o Identity and Access Management / Privileged Access Management / Adaptive Authentication Solutions
o IT Change Management
o IT incident and problem management
o Security Incident and Event Management (SIEM) technologies
o Cyber Incident and response
o Enterprise security controls frameworks
o Cloud Security
o Financial services operational processes and technology
o Automated business process controls
Additional Requirements
* Willingness to travel up to 20% annually.
* Knowledge of German or Italian language will be considered a plus.
State Street’s Speak Up Line and related notices may be applicable where required by policy. This description does not change the terms of employment.
Seniority level
* Mid-Senior level
Employment type
* Full-time
Job function
* Information Technology
#J-18808-Ljbffr