Job Description

Who we are looking for

State Street Bank International GmbH (SSBI) is looking for an Auditor, Officer for the support of our Corporate Audit Department with a focus on IT, who will be responsible for providing independent, objective assurance and advisory services designed to add value, minimize risk and improve the overall control environment of SSBI and State Street overall. You will interact and communicate regularly with executive management and have tremendous insight into all parts of the bank's daily operations and Governance Processes.

In this role you will be a subject matter specialist and internal controls experts, providing knowledge and experience in key risk areas, in particular, related to managing and performing audits covering IT governance, systems infrastructure, information security, application controls, operational and oversight monitoring activities. You will be a problem-solving partner, looking ahead to help management envision future risks and opportunities. The role can be based in Milan Italy . You will be assigned to audit projects related to the SSBI headquarters and its branches.

• Successfully participate in the planning, execution and completion of audits following a risk based methodology in line with Division and Industry Standards as well as regulatory requirements, support recommendations for internal control improvements and preparation of audit reports providing clear messages on key risks and key audit issues.
• Participate in the planning, assessment, testing and reporting phases of audits covering IT governance, systems infrastructure, information security, application controls, and operational activities.
• Perform independent and objective assessments of risks and controls to improve risk management practices and assess controls for compliance with laws, regulations, company policies and business needs.
• Prepare or review documentation of audit work in adherence with the division's risk-based audit methodology and industry standards
• Establish strong relationships within the Corporate Audit function.
• Develop a good understanding and knowledge base of the company's operations and establish effective business relationships within the company
• Gain and apply a thorough understanding of audits and assigned functions, including utilization of technology and active usage of Data Analytics.
• Demonstrate, maintain and expand your knowledge of financial and operational internal control methodologies and terminologies (e.g. COSO, COBIT), process and control industry standards, audit industry best practices and regulatory expectations, risk management practices and techniques as well as supervisory regulatory requirements such as European Central Bank (ECB) and BaFin.

• A high degree of professionalism, professional curiosity and skepticism, organizational, analytical and project management skills.
• Strong written and verbal communication, interpersonal, presentation and organizational skills.
• Ability to work independently in an international team across multiple locations with global stakeholders.
• Thorough knowledge of the European regulatory environment applicable to financial institutions and proven ability to research, interpret and apply regulatory requirements.
• Fluency in English - written and spoken. Good German level is highly appreciated

• University degree in economics, Information Technology, business administration or related field.
• 3-5 years of experience in auditing technology-related areas such as e.g. Enterprise security control frameworks, IT incident and problem management, Automated business process controls, IT Resilience and Disaster Recovery, Identity and Access Management / Privileged Access Management/Adaptive Authentication Solutions, change management, Perimeter/Internal Security Technologies (Firewalls, Intrusion Detection and Prevention Systems)
• Interest in obtaining or already holding industry-recognized certifications (e.g. CISA, CISSP, CISM, etc.).

• Willingness to travel, mostly within Europe.