Internal IT Auditor (m/f)

Role & responsibilities

• Lead internal audit missions in the IT and information security field, and participate in audit engagements coordinated at European level in the context of our competences as national authority (NCA):
• Identify risks linked to information systems of the CSSF and ensure that mitigation measures are in place
• Perform independently audits on IT projects, on computer applications and information systems security
• Provide reasonable assurance on the risk control measures
• Analyze and assess audited processes and provide concrete suggestions to improve their efficiency
• Draft audit reports
• Ensure follow-up of audit recommendations
• Provide with the necessary IT support for the preparation and execution of audit missions in all CSSF’s activities. Ideally, the candidate will be required to participate and carry out business audits

Your profile

• Four or five-year master’s degree in computer science, an additional degree in relation to information system audit is an asset
• Proven professional experience of minimum 2 years as Information System Auditor
• CISA certification will be considered as a strong asset
• Excellent knowledge of internal audit methodology and of best practices in information technology
• Excellent knowledge of IT processes and risks
• Interest in new technologies (cloud computing, virtual currencies, artificial intelligence, open banking, etc.)
• Knowledge of the financial sector is an advantage
• Excellent writing, analytical, synthesis and communication to top management skills
• Rigor, precision, confidentiality qualities
• Ability to work independently
• Full professional proficiency in written and spoken French and English. German and/or Luxemburgish will be considered an advantage

The successful candidate (m/f) will be hired as public employee (“employé de l’Etat”) under a permanent contract. If the candidate meets the required conditions, s/he will be asked to apply for admission to the status of civil servant (“fonctionnaire de l’Etat”).

Prior to the conclusion of the contract, the candidate must submit an extract from the criminal record (bulletin n°3), dated less than 2 months, in order to prove their conduct and integrity.