IT Auditor - Corporate Banking Technology

About Deutsche Bank

• We are Germanys leading bank with strong positions in Europe and significant presence in the Americas and Asia Pacific. Were driving growth through our strong client franchise, investing heavily in digital technologies, prioritizing long-term success over short-term gains, and serving society with ambition and integrity.
• We serve our clients real economic needs in commercial and investment banking, retail banking and transaction banking, and provide ground-breaking products and services in asset and wealth management. That means a career packed with opportunities to grow and the chance to shape the future of our clients.

Group Audit

• Group Audit (GA) function is a professional, business focused, proactive risk-based global audit team that operates with transparency, integrity, and independence. The function provides a systematic, disciplined approach to examine, evaluate and report objectively on the adequacy of both the design and operating effectiveness of the systems of internal control and the effectiveness of risk management and governance processes within the Bank's business and infrastructure / technology areas.
• Being Deutsche Bank's 'third line of defense' we have a high profile in the Bank acting as an independent and forward-looking challenger and adviser to Senior Management and are increasingly relied upon by the Regulators.
• Our global connectivity provides a stimulating environment and the opportunity to collaborate, network and share knowledge with intelligent colleagues and specialists around the world. Our colleagues are known for their agile minds, looking beyond the obvious, and challenging the status-quo in an open-minded, collaborative way. We consistently invest in our people, offering genuine opportunities for development and advancement.

Your key responsibilities

In your role as Auditor, Technology you will carry out the planning, preparation, coordination, and execution of audits, mainly in Information Technology, which covers topics such as information security, applications, databases, networks, and cyber security.

The main responsibilities for this include:

• Plan, prepare, coordinate and execute/participate in audits to evaluate the adequacy and effectiveness of technology controls in accordance with Group Audits Methodology.
• Contribute to Continuous Monitoring and overall implementation of Group Audit Methodology.
• Undertake audit assignments, draft and consolidate audit reports for review by audit management and facilitate finding tracking and validate closure of findings.
• Participate in ad hoc projects and special inquiries.
• Work closely with colleagues in New York, Jacksonville, London, Frankfurt and Singapore.

Your skills and experience

Skills Youll Need

• University degree in computer science, mathematics, engineering or equivalent qualifications/work experience e.g. MBA with strong technology focus. Certifications as CISA, CISM, CISSP or equivalent qualification in the areas of information security, application development/management, project management or process-/quality management would be an advantage.
• Demonstrable experience in one or more of the following disciplines: IT infrastructure, IT production, IT operation such as system administrator, database administrator, operator in a data centre, or software development for IT business and/or infrastructure applications.
• At least 5 years of experience in IT Audit, IT risk management or information security e.g. performing audits and security assessments, in relation to IT governance and compliance with regulatory and policy requirements.
• A fundamental understanding of the following Audit third-line disciplines: audit concepts (e.g. pre-/post implementation audits), controls in outsourced environments (e.g. for managed services), auditing project management and auditing IT service- and quality management.
• Knowledge about various Information Technology Frameworks, e.g., FFIEC handbook, CAT tool, CoBit, ISO 27k, NIST 800 series, CSC Top 20 Security Controls and ability to use these as guides to evaluate the state of controls within the financial industry.

Skills That Will Help You

• Very good written/verbal communication skills and the ability to communicate effectively in conflicts and at all management levels. Language skills beyond English are not a requirement but are generally useful.
• Banking business knowledge in e.g. payments products, retail banking, investment banking or risk and finance are useful to also understand the underlying risk better.
• Experiences in analyzing and articulating IT Infrastructure risks combined with a good understanding of IT services and IT processes in an enterprise environment.
• Flexibility, pro-active, self-sufficient and innovative with strong organizational skills to take ownership and responsibility of agreed targets and meet them within budget to enable a timely and efficient completion of audit projects.
• Ability to multi-task assignments and prioritize the workload with limited supervision and be resilient under pressure and the ability to deliver to deadlines.