SG
Senior IT & Cybersecurity Auditor
Contract type
Ongoing
Work mode
Remote · Basel, Basel-Stadt, Switzerland
Experience
Lead / principal · 10+ years
Job description
Senior IT & Cybersecurity Auditor role in an international financial services environment, responsible for leading complex IT audit engagements and strengthening technology, cybersecurity and risk management.
At a glance
- Work mode
- Remote · Basel, Basel-Stadt, Switzerland
- Languages
- English – fluent, German, French
What you'll do
- Plan, lead and deliver comprehensive IT audit engagements based on a risk-oriented approach, including the development of audit strategies and testing procedures.
- Review and evaluate technology-related risk areas, including cybersecurity, IT governance, infrastructure, network security, access management, data protection, operational resilience and emerging technologies.
- Analyse complex IT architectures, identify potential weaknesses and assess the effectiveness of existing security measures and internal controls.
- Review findings from penetration tests, vulnerability scans, security assessments and monitoring activities, translating technical observations into relevant risk insights.
- Assess emerging technologies, particularly Artificial Intelligence and AI-driven solutions, and evaluate their implications for cybersecurity, governance and technology risk.
- Present audit findings, recommendations and risk assessments to relevant stakeholders, including senior management and executive-level decision-makers.
- Prepare structured and impactful audit documentation, ensuring that identified issues are clearly communicated and actionable.
- Track remediation activities and evaluate the effectiveness of implemented measures.
- Work closely with colleagues across IT, Cybersecurity, Risk Management, Governance and Business functions to promote continuous improvement and strengthen the overall control environment.
What we're looking for
- Degree in Computer Science, Information Technology, Information Systems or a comparable discipline, alternatively equivalent professional experience.
- At least 10 years of relevant professional experience in IT, Cybersecurity, Information Security, Technology Risk or a related technical field.
- Strong practical knowledge of several core technology and security domains, such as Network Security, Identity and Access Management, Vulnerability Management, Security Operations or IT Resilience.
- Experience working with technical security assessments, penetration testing results, vulnerability scanning solutions or comparable security tools.
- Interest in Artificial Intelligence, machine learning and AI-driven technologies, particularly in relation to security, governance and risk management.
- Strong analytical capabilities, a structured approach to problem-solving and the ability to assess complex technical information independently.
- Excellent communication and stakeholder management skills, with the confidence to challenge established practices constructively and engage with senior decision-makers.
- High professional integrity, sound judgement and a strong sense of responsibility.
- Fluent English is required.
- Willingness to undertake international business travel, approximately 20 days or more annually.
Nice to have
- Previous exposure to IT Audit, Internal Audit, External Audit, Technology Risk or another assurance-related function is highly desirable.
- Professional certifications such as CISA, CISM, CISSP or equivalent qualifications are considered an advantage.
- Practical experience in AI governance or AI-based solutions is beneficial.
- German and/or French language skills are an additional advantage.
Benefits
Work in an international financial services environment where technology, security and risk management play a central role.
Collaborate with experienced professionals from IT, Business, Risk and Governance in a supportive and knowledge-driven environment.
Benefit from opportunities for continuous professional development, specialist training and relevant industry certifications.
- Take on a highly visible position with direct exposure to senior stakeholders and strategic decision-making.
- Enjoy a broad and varied scope of responsibility across technology, cybersecurity and emerging risk areas.
- Contribute to meaningful initiatives that strengthen organisational security, resilience and governance.
- Join a professional culture that values integrity, initiative, collaboration and individual expertise.
Apply
About SwissPeak Partners GmbH
What they value
- Integrity
- Initiative
- Collaboration
- Individual expertise