IT Audit Manger / ICT Service Auditor
Berlin · 6+ years experience · Full-time · Remote · Posted Sep 30, 2026
At a glance
- Experience
- 6+ years experience
- Employment
- Full-time
- Workplace
- Remote
- Location
- Berlin
About the role
- We are seeking an Internal IT Auditor to conduct the full IT audit cycle, ensuring operational effectiveness, reliability, and regulatory compliance across our internal IT environments and critical ICT third-party ecosystems.
- Our Internal Audit team provides independent assurance over risk and control management, and follows proactive risk mitigation and robust governance to safeguard our digital banking environment.
- This is a unique opportunity to play a pivotal role in shaping our IT resilience, where you will engage directly with internal architecture teams and critical external vendors to navigate the evolving landscape of digital banking and European financial regulations.
Responsibilities
- Execute the full audit cycle: Perform comprehensive risk and control management over IT operations to ensure effectiveness, reliability, and adherence to established professional and regulatory standards.
- Audit critical ICT services & vendors: Lead audits of third-party vendors, outsourced service providers, and cloud infrastructures, evaluating their control environments and how internal processes govern these external services.
- Analyze data and IT processes: Obtain and evaluate documentation, flowcharts, and data using data-driven audit approaches for system development, IT security, and vendor management.
- Deliver impactful reporting: Prepare detailed Internal Audit reports that translate complex technical findings into business-relevant insights and actionable recommendations for senior management.
- Drive continuous improvement: Continuously monitor the IT and ICT vendor risk landscape, facilitate alignment discussions, and advise management on best practices and risk remediation actions.
Requirements
- 6 years of significant experience functioning as an Internal IT Auditor at an international company within a regulated environment (preferably a bank, financial institution, fintech, or an audit/consulting firm).
- Deep understanding of IT General Controls (ITGC), modern IT/cloud architectures, operational resilience frameworks, and ICT Third-Party Risk Management (TPRM).
- Solid understanding of European financial regulatory frameworks relevant to IT and outsourcing, particularly DORA, and MaRisk.
- Experience in data-driven audit approaches, including large-scale data evaluation, and proficiency in modern audit tools and platforms.
- Strong ability to engage effectively with cross-functional internal teams and external ICT service providers, including reviewing third-party assurance attestations (e.g. SOC 1/SOC 2, ISO, ISAE 3402).
- High level of integrity and professional skepticism, combined with excellent interpersonal skills to influence both technical and non-technical stakeholders
- Fluency in English is required (verbal and written).
Preferred qualifications
- Holding professional certifications such as Certified Information Systems Auditor (CISA), ISO 27001 Lead Auditor, CISSP, or comparable qualifications, are a plus.
- German is a plus.
Benefits
- Competitive personal development budget
- Work from home budget
- Discounts to fitness & wellness memberships
- Language apps
- Public transportation
- Premium subscription on personal N26 bank account as well as subscriptions for friends and family members
- Additional day of annual leave for each year of service
- Relocation package with visa support
Skills
- IT General Controls
- ICT Third-Party Risk Management
- DORA
- MaRisk
- SOC 1
- SOC 2
- ISO 27001
- ISAE 3402
- CISA
- CISSP
