We re hiring an IT Subject Matter Expert to bring technical depth and digital innovation to our Internal Audit function. This is a new position responsible for enhancing audit methodology and execution by integrating data analytics, automation, and digital insights into audit practices. The IT Subject Matter Expert (IT SME) collaborates with internal and external stakeholders to assess IT risk, perform specialized reviews, and develop innovative audit tools that comply with The IIA Standards and support data-driven auditing.
What You ll Do
- Lead and support audits of IT general controls (ITGCs), cybersecurity, ERP systems, and key business applications.
- Design and implement data analytics to support audit testing, continuous monitoring, and risk identification.
- Evaluate IT risks in system implementations, upgrades, and digital transformation initiatives.
- Collaborate with internal teams and external providers on IT risk, cybersecurity, and cloud governance.
- Translate complex technical findings into clear, actionable insights for non-technical stakeholders.
- Support the development of internal audit tools, methodologies, and digital capabilities.
- Provide guidance on IT-related controls and testing to audit teams across the group.
Essential Qualifications
- Degree in IT, Computer Science, Data Analytics, or a related field.
- 6 8 years of experience in IT audit, cybersecurity, or digital risk (internal/external audit or consulting).
- Professional certifications such as
CISA, CISM, CRISC
, or equivalent. - Strong understanding of IT control frameworks (e.g.,
COBIT, ISO 27001, NIST
). - Experience with
cloud environments
(especially Azure
), ERP systems (e.g., Oracle
), and IT security. - Fluent in
English
(spoken and written).
Desirable Skills
- Experience with
data analytics tools
(e.g., Power BI, SQL, ACL, SAS). - Background in internal controls or risk management
- Strong communication and stakeholder engagement skills.
- Consulting experience is a plus.
- Familiarity with
GDPR
and European IT regulatory frameworks.