Internal Auditor – Cyber & IT Controls and Corporate Investment

About the role

Join the Internal Audit Strategic Business Unit to provide independent assurance over governance, risk management and internal controls. You will work in two specialisations – Cyber & IT Controls and Corporate & Investment – helping the business anticipate and mitigate critical risks.

Key responsibilities

• Plan and execute audits of cybersecurity, IT governance, infrastructure, applications and core banking systems.
• Assess IT project governance, emerging technology risks and support automation, continuous auditing and data‑analytics initiatives.
• Conduct operational audits across financial markets, structured finance, ESG initiatives, subsidiaries and support functions.
• Evaluate efficiency, effectiveness and adequacy of processes and controls, and recommend improvements aligned with strategic and regulatory requirements.

Required profile

• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, Accounting, Finance or Business Administration.
• Minimum 3 years of experience in internal or external audit (IT/cybersecurity or financial).
• Progress toward or possession of relevant professional certifications (CISA, CISM, CRISC, ISO 27001 Lead Auditor, CIA, CPA, ACCA).

Required skills

• Knowledge of IT frameworks such as COBIT, NIST, ISO/IEC 27001, ITIL and OWASP.
• Experience with cloud platforms, application controls and data‑analytics tools.
• Familiarity with AI‑enhanced audit techniques.

What we offer

• Opportunities to grow within a dynamic, strategic business unit.
• Exposure to cutting‑edge technology and complex financial environments.
• Collaborative culture focused on resilience and long‑term value creation.