Senior Internal Auditor – IT, Security & Third Parties

Job description

Banca Generali ( www.bancagenerali.com ) is a private bank leader in Italy in financial planning and in the protection of clients through a network of private consultants at the top of the sector in terms of skills and expertise/professionalism. Within the Internal Audit function we are looking for a talented and proactive resource to join the team. The Internal Audit function, as an independent Third Line of Defense control function, is responsible for planning and carrying out risk-based audit engagement on Banca Generali Group.

The Audit IT, Security and Third Parties team is responsible for the audit activities on IT, Security and third parties core processes in the Legal Entities of the banking group.

Carry out audit activities on the bank processes with a focus on IT & security controls policies and procedures, third parties management and related Regulation and standards

• Assess the security, reliability and integrity of IT systems, including applications, databases and infrastructure Carry out audit activities on the Controlled Legal Entities of the banking group (in Italy, Luxembourg and Switzerland) with a focus on IT & security controls and third parties management
• Support the Head of Internal
• Audit and the team in performing risk assessment activities and defining
• Audit plan; Discuss audit results with stakeholders
• Write practical recommendations and audit report
• Monitor audit issues and validate actions closure
• Provide advisory on ad-hoc projects / topics
• Stay updated on emerging IT & security trends, threats and best practices to enhance the audit process (for example, Artificial Intelligence) Occasional travel may be required.

Qualifications

We are seeking candidates with a strong academic background in STEM disciplines.

• Bachelor’s or Master’s degree in Information Technology, Computer Science, Engineering, or any related field Languages: Italian (native), English (fluent)
• Strong knowledge of processes and controls in IT, Security and Artificial Intelligence Area Good knowledge of third parties’ management process, focusing on ICT vendors governance
• Strong knowledge of the key IT & Security Audit Regulations and Frameworks, such as NIST, COBIT, ITIL, Circ. 285, DORA, AI Act Basic knowledge of corporate governance, banking business and regulatory requirements At least
• 5 years of proven experience in IT and security auditing and AI-related activities, ideally within Internal
• Audit functions in financial institutions.

Main Skills required

• Ability to work independently and as a part of a team Knowledge and ability to evaluate (with limited supervision) and enhance internal control system evaluation processes Capability of managing risk assessment (with limited supervision) Good written and oral communication skills, with the proven ability to present and explain complex information to diverse audiences including senior level staff
• Proficiency in audit tools and processes
• Strong knowledge of Internal
• Audit methodology and principles and of the internal control system Good experience in the use of data analytics.

Nice to have

Professional certification (ACCA, CIA, CISA, CISSP, CFE, CFSA) or equivalent would be an advantage Proactive in leveraging Artificial Intelligence to enhance Internal

• Audit processes High attention to detail and deadlines
• Excellent analytical skills Integrity, confidence & accountability, flexibility, and life-long learning Resilience, stress management, time management and problem solving Strategic and innovative thinking as well as change management Good in negotiation, teamwork and collaboration.