Technology Audit Professional assessing risk exposure related to technology and security at SEB. Supporting digitalisation journey through evaluation and assurance on governance and risk by a qualified audit team.
Responsibilities
As a member of our team, you will assess SEB's risk exposure related to technology and security and contribute to the development of our audit strategy.
You need to stay on top of the threat landscape, the regulatory environment, and how new technologies, new ways of working and a growing ecosystem is altering SEB's risk posture.
You will also use your skills and creativity to develop and deploy smart ways of testing controls and deliver top-quality audit work, e.g. using AI and data analytics.
You will participate in and lead audit assignments in areas such as cyber security, technical resilience, and data management, spanning governance and operational processes, technology platforms, business applications, third-party service providers, and more.
You will assist other teams within Group Internal Audit to identify and assess technology related risk within business processes and perform integrated audit assignments.
You will also provide guidance and support to the organisation in the implementation and enhancement of controls.
The team has a global reach, so occasional travelling is part of the job.
Requirements
You have a genuine interest and proficiency in technology, cyber security and risk management.
You could either have a technical or auditor background, working in roles such as solution architect, senior developer, IT security officer, internal/external auditor, or similar.
Hands-on experience as a developer or technician, experience from a Big4 audit firm, and exposure to the financial industry are meriting.
You are eager to learn and continuously develop, and either possess or are willing earn relevant certifications, such as CISA, CISSP, CISM.
Ideally you have experience in one or more of the following areas:
System development, maintenance, and/or operation
IT audit, security testing, or similar
IT and security governance and risk management
Security operations
Cloud technology and security
Programming and scripting
Third party risk management
Data management and Artificial Intelligence
Industry standards such as ISO27k, ISF SoGP, CIS18, NIST CSF, COBIT, etc.
You have a MSc or BSc degree in the IT field, or equivalent experience, and have proven skills in professional English report writing.
Finally, you are dedicated, curious and self-propelled in your assignments. You are a team player but can deliver independently on time and scope with minimum supervision. You are structured and have strong project and time management skills. You are also an excellent communicator with the ability to build trust and relationships at all levels in the technology and business organisations.
Benefits
Flexible and empowering work environment.
Extensive training and learning opportunities.
International opportunities and working environment.
OT Cybersecurity Engineer deploying and managing security solutions for operational technology environments at Solventum. Collaborates with teams to improve security posture and provide user support.
Principal Cybersecurity role at AT&T focusing on cloud security feature design and implementation. Leading innovative security solutions in conjunction with modern cloud technologies and Agile methodologies.
Cloud Security Vulnerability Management Program Specialist ensuring secure configurations of cloud workloads. Focused on vulnerability management, monitoring, and risk remediation across environments at Bank of America.
Security Architect delivering secure solutions for Defence and National Security at SiXworks. Supporting agile teams in technical projects like Kubernetes and security risk management.
CIS Security Manager responsible for EID’s information security strategy and compliance. Ensuring protection of information assets and promoting security culture across the organization.
Cyber Security Subject Matter Expert at CACI supporting a new DoD contract. Working on cloud security with an emphasis on system security engineering and risk management.
Cybersecurity Engineer developing solutions for complex security challenges protecting data and networks. Implementing next generation security solutions for government and commercial clients in hands - on roles.
Information Security Manager responsible for security governance and risk management. Engaging with technical teams for compliance with security standards and best practices.
Security Access Control Specialist at AMERICAN SYSTEMS managing database queries, document processes, and security measures. Supporting federal government programs through effective security operations in McLean, VA.