IT Principal Audit Analyst - Corporate Banking Technology

Role Description

The Principal Audit Analyst within the Corporate Bank Technology team predominantly supports the IT audit team on internal IT related audits throughout the entire audit life-cycle. The Principal Audit Analyst will under reasonable supervision support to evaluate the adequacy and effectiveness of internal controls relating to the risks within Corporate Bank Technology. They will continue to develop their technical knowledge and broaden their expertise in a wide range of audit areas.

In this role, the Audit Analyst will:

• proactively develop and maintain professional consultative working relationships, primarily within the team and with support functions.
• use a range of approaches to collect relevant information to assess risk, resolve issues or carry out tasks.
• work in a co-operative manner with subject matter experts and other teams from across the function to provide full finding validation respectively front-to-back audit coverage.

Details of the role and how it fits into the team

• You will be part of the global Group Audit Technology Corporate Bank team reporting into the responsible Principal Audit Manager (PAM) based in Frankfurt, reporting to a Chief Auditor (CA) also based in Frankfurt with global responsibility.
• Your role is key to support the regulatory requirement internal audit plan and will support IT related audit reviews in various IT related areas of the Bank.

Deutsche Banks Group Audit is growing and moving into new locations making it an exciting time to join!

• We have a multitude of objectives to achieve our strategic goal so require an enthusiastic and motivated teammates to achieve this. We are seeking creative, curious, and intelligent people to join our ranks.
• We offer a competitive salary, benefits package and continuous development opportunities with a team oriented and supportive culture.

Who Are We

• The Group Audit (GA) function comprises c. 700 staff who take a proactive, risk based and independent approach to assist the Banks business and infrastructure functions to identify key control weaknesses.
• GA prides itself in ensuring the highest standard in professional delivery. Being DBs third line of defense GA have a high internal profile, acting as an independent and forward-looking challenger and adviser to Senior Management. We are strongly relied upon by the Regulators.
• GA prides itself on being a diverse and inclusive global division where culture is at the core of our team dynamic. GA is inextricably linked to promoting strong corporate and ethical governance, a philosophy that it is the responsibility of each and every person employed within DB. GA is about trust, excellence, people and performance.

The Opportunity

• You will be a member of the global Group Audit (GA) Technology Team reporting into one of the accountable Principal Audit Managers. There are a number of roles within the function covering first line of defense areas (Business Divisions) including Investment Bank, Corporate Bank and International Private Bank. As well as second line of defense areas such as, Technology or Infrastructure functions including Anti-Financial Crime, Compliance, Risk, Finance and Operations (Infrastructure Divisions). This is where subject matter expertise is greatly welcomed. You will join one of the teams responsible for auditing Deutsche Banks Information Technology (IT) and Information Security (IS) risks and controls across its Business or Infrastructure divisions.
• This includes opportunities to audit IT general and automated application controls, application and vendor governance as well as data management, security and the usage of emerging technologies such as artificial intelligence (AI), robotics and cloud computing. Group Audit Technology provides the opportunity to partner with various stakeholders. You will lead or participate in audits of a specific business, functional or infrastructure area in accordance with the audit methodology, evaluating the adequacy and effectiveness of internal controls relating to risks within those business areas.
• GA runs a professional, business focused, proactive risk based global audit function that operates with openness, integrity and independence. You and Group Audit will assist the Management Board in mitigating high level control risks to safeguard Deutsche Banks assets, reputation and sustainability.

Your key responsibilities

• Support in the planning and execution of audits in various IT audit teams, to evaluate adequacy, effectiveness, and efficiency of IT General Controls, IT Automated Controls and other IT support processes.
• Perform design and operating effectiveness testing of key controls to mitigate risks identified in IT findings, and document test results in the Audit Work Paper management tool in accordance with Group Audit Methodology. These include findings related to IT applications (partly in conjunction with Business audit teams), IT Infrastructure processes and systems, and Cyber Security.
• Completion of work assignments within agreed deadlines and timely escalation of challenges.
• Fostering open dialogue and communication with colleagues across different locations within the global IT Audit Team and partnering in providing technology subject matter expertise to Operational Audit teams responsible for relevant underlying business process controls.
• Proactively developing and maintaining professional working relationships with colleagues, the business and respective support areas and acting as a natural role model.

Your skills and experience

• At least 3 years of experience in IT Audit, IT Risk Management or Information Security, and a good understanding of some of the following areas: IT security; IT production controls (e.g. Change / Problem Management); IT processes (e.g. ITIL); IT Control Frameworks (e.g. COBIT); Information Security; and banking and transaction processing.
• University degree in Computer Science, Mathematics, Engineering, or a related subject. Certifications such as CISA, CISM, CISSP, or equivalent qualification in the areas of information security, project management or process-/quality management would be an advantage, but not a must.
• Strong written and verbal communication skills in English and the ability to communicate effectively in conflict situations. Language skills beyond English are not a requirement.
• Strong analytical skills and structured thought process with the ability to clearly articulate control deficiencies and related risk. Flexible, proactive, and innovative mind set with strong organizational skills to take ownership and responsibility for agreed targets and meet them within budget to enable a timely and efficient completion of audit projects.
• Ability to work under pressure, multi-task and prioritize workload.