Information Technology Audit Manager
hace 4 días
Madrid
At WiZink Bank, we are looking for a Technology Internal Audit Manager to join the WiZink Internal Audit team. Our mission is to enhance and protect organisational value by delivering risk-based, independent assurance, advice, and insight, supporting sound decision-making in a highly digital and regulated environment. This role has a strong focus on technology risk, data, cybersecurity, emerging technologies (including Generative AI) and regulatory compliance, ensuring alignment with both internal policies and evolving regulatory expectations. Key responsibilities As Technology Internal Audit Manager, you will: • Plan, scope, and deliver assurance and advisory engagements included in the Internal Audit Plan in a timely, efficient, and high-quality manner, in line with the International Professional Practices Framework (IPPF)., • Manage audit engagements and audit teams on a day-to-day basis, ensuring delivery against approved scope, budget, and timelines., • Proactively design and implement automated audit routines, data analytics, and technology-enabled audit techniques, including the responsible use of advanced analytics and GenAI tools where appropriate., • Maintain an up-to-date understanding of technology, data, AI and cybersecurity risks, adapting audit approaches in response to new threats, emerging technologies, and regulatory change., • Assess governance, controls and risk management frameworks related to data usage, AI models, GenAI solutions and their integration into business processes., • Prepare clear, accurate and timely audit reporting for senior management, the Audit Committee, and the Board., • Lead discussions with stakeholders on significant risk exposures, control weaknesses, fraud risks, governance topics, and the overall control environment., • Ensure compliance with internal policies, professional standards, and applicable regulatory requirements, including supervisory requests., • Contribute to the continuous improvement of the Internal Audit Methodology Manual, aligned with IIA guidance and leading practices., • Coach and develop team members, promoting knowledge sharing and a strong ethical, risk-aware culture., • Act as a role model for integrity, professionalism, and sound judgment, safeguarding WiZink’s reputation at all times. Essential experience, knowledge and skills • At least 6 years’ experience in internal audit, risk management or control functions within a bank or specialised credit institution., • Proven experience in risk-based auditing, including the use of data analytics and computer-assisted audit techniques (CAATs)., • Strong expertise in technology and application controls, including:, • IT governance and operating model, • Logical access and identity management, • Change and release management, • Backup, resilience, capacity and availability, • Third-party and outsourced services, • Information and cyber security, • Business continuity and disaster recovery, • Experience auditing data-driven processes and advanced analytics, including environments where AI or Generative AI solutions are used., • Experience performing integrated audits covering both business and technology controls., • Bachelor’s degree in Information Technology, Information Systems, Business Administration or equivalent., • Relevant professional certifications such as CIA, CISA, CISSP, CISM, CCSK, ISO 27001 Lead Auditor, PCI QSA, GIAC, or similar., • Strong communication, negotiation and stakeholder management skills, with the ability to challenge constructively., • Fluency in English and Spanish, both spoken and written. Desirable experience • Experience in highly outsourced and cloud-based technology environments., • Strong understanding of banking products, digital channels, and emerging financial services., • Knowledge of technology and AI-related regulation, including EU Artificial Intelligence Act (AI Act), Digital Operational Resilience Act (DORA), PSD2 and EBA Guidelines on Outsourcing, • Hands-on experience with analytics and reporting tools (e.g., SQL, SAS, ACL, Python, Power BI) and GRC platforms (e.g., RSA Archer)., • Familiarity with IFRS/IAS, financial reporting tools and SOX compliance., • Background in systems development, programming, or data engineering., • Proficiency in Portuguese. What we offer • Permanent employment with long-term stability., • Flexible working hours and hybrid working model., • Competitive compensation package, including financial and non-financial benefits., • Role based in Madrid, with occasional travel to Zaragoza and Portugal. Recruitment process • Please upload an updated CV if you are interested in this role., • WiZink is committed to equal opportunities, diversity, and inclusion., • We welcome feedback to continuously improve our recruitment experience.