ICT Auditor (2nd Line of Defence) (m/f/diverse

Group ICT Risk & Resilience Management (GRM-ICT RRM) is responsible for the group-wide management of ICT security risks. The function ensures an adequate level of (cyber) security in Commerzbank through clearly defined roles and responsibilities within the security organization. GRM-ICT RRM serves as the "second line of defence" (2nd LoD) for ICT security. This involves setting relevant standards by establishing controls within guidelines and policies and checking for compliance. Additionally, the function reports on ICT security risks, accompanies the risk mitigation process, makes decisions, and escalates issues where necessary.

For our offices in Prague, we are looking for ICT Auditors to support our 2nd LoD function. In this role, you will help strengthen our security by performing independent audits, identifying risks, and ensuring compliance with all legal, regulatory, and internal standards. Your knowledge of ICT security and risk management will ensure a resilient ICT environment aligned with regulatory (e.g. Digital Operational Resilience Act (DORA)) and internal standards.

Your tasks

• Participate in the audit team of the 2nd Line of Defence for ICT controls of Commerzbank in Group ICT Risk & Resilience Management which is based across Germany and the Czech Republic
• Conduct independent audits of ICT-related matters, identify risks, assess their relevance and derive risk mitigating measures. Ensure compliance with legal, regulatory, and internal requirements. Summarize your results clearly in audit reports for the responsible divisional head.
• Apply both agile and classic project management methods to execute audit assignments successfully. Depending on your experience, take on the role of auditor or audit lead within the team.
• Show strong initiative and contribute to a versatile, motivated team. Take responsibility for additional professional topics, further develop audit approaches, or drive topics such as data analysis and continuous auditing.

Your Profile

• Completed degree with a focus on computer science or business informatics, or completed vocational training in the IT field or commercial, business or technical training.
• Understanding of internal banking, legal, and regulatory requirements (e.g., MaRisk, IT Security Act, BAIT, NIST, DORA, ISO/IEC 27001) combined with relevant IT knowledge of banking systems in relation to ICT security.
• At least 2 years of experience conducting IT/ICT audits – alternatively, experience as an ISMS/ISO 27001 auditor.
• Experience with data analysis, agile working methods, project management skills, and bank related digitalization processes.
• Additional qualifications e.g., CISA, CISM, CISSP, ISO/IEC 27001 Lead Auditor are a plus.
• Excellent communication skills in English written and spoken. German skills are an asset.

The company

Commerzbank has been present in the Czech Republic with a branch in Prague since 1992. Decades of experience combined with the world class know-how and skills of our employees enabled the Prague branch to become the second largest Commerzbank international hub globally, providing extensive services to Commerzbank worldwide, especially in IT, Finance, Risk Control, Credit Risk management, Human Resources and Procurement. In Commerzbank you will find yourself supported by a team of nearly 1,000 colleagues locally and over 30,000 co-workers globally, located in more than 40 countries, with diverse talents and backgrounds. We are an equal opportunity employer that strives to enhance our product offering by hiring individuals driven to create a positive impact in the banking world. 

 

Contact

In case of interest please apply via this job portal.