Welcome to the team:
Head of Audit IT Applications & IT Risk Management (m/f/diverse)

    Your tasks

    • Leading a team of auditors and lead auditors focused on IT applications, ICT providers, and third-party risk management;
    • Fostering a collaborative and inclusive team environment;
    • Identifying skill gaps and implementing training programs to enhance team capabilities;
    • Providing guidance and support to team members to foster professional growth;
    • Monitoring and evaluating team performance to ensure continuous improvement;
    • Implementing effective communication strategies to keep the team aligned and motivated;
    • Identifying and recruiting top talents to build a high-performing audit team;
    • Overseeing and advising auditors in conducting internal and external audits;
    • Enhancing the risk culture across the organization through active audit engagements;
    • Developing, reconciling, and implementing a strategic audit plan that aligns with organizational goals and regulatory requirements;
    • Ensuring efficient and effective allocation and utilization of audit resources;
    • Supporting the follow-up and timely completion of corrective measures from internal and external audits.

    Your profile

    • Professional experience in an IT environment, such as an (IT) auditor, information security officer / manager, enterprise architect, network engineer, or similar role;
    • Strong leadership and team management skills;
    • Excellent analytical, communication, and interpersonal skills;
    • Strong knowledge of relevant regulations, standards and frameworks (e.g. ISO 2700x, NIST, EBA guidelines)
    • Solid knowledge in IT related areas, such as identity & access management, service management, cloud computing, disaster recovery management, business continuity management (BCM), vendor management, security logging and monitoring, and API development;
    • Experience in providing audit support, including interactions with external regulators;
    • Certifications such as CISA, CISSP, CIA, CCSK, CCAK, or similar are advantageous;
    • Ability to uphold ethical judgment and integrity in all activities and compliance with regulations;
    • Fluency in English and German - both written and spoken;
    • University degree or equivalent practical experience in the respective area;
    • Willingness to travel occasionally.

     

    In return we offer:

     

    • Good work-life balance, including 25 days annual paid leave (increasing with 1 day per year up to 31 in total), flexible working hours and work-from-home and work from abroad opportunities;
    • Luxury package of additional health and dental insurance;
    • Food vouchers in the amount of 128 BGN monthly;
    • 6 additional annual days off for exceptional circumstances;
    • Employee assistance program for psychological, financial and legal consultations;
    • Multisport card;
    • Annual contribution of 300 BGN net per child for a summer camp/school/kindergarten for children up to age of 15;
    • Possibilities for building career-advancing skills by covering training/certification courses and conferences based on individual learning and development needs, access to an online learning platform;
    • Opportunities for long-term professional development in a stable, 150-year-old company while contributing to the vision and mission of a new organizational unit;
    • Friendly and supportive multicultural environment, open to new opinions and ideas.

    The company

    Commerzbank is a leading international commercial bank with branches and offices in almost 50 countries. The world is changing, becoming digital, and so are we. We are leaving the traditional bank behind us, and we are choosing to move forward as a digital enterprise.

    As part of our strategy, Commerzbank is expanding its Digital Technology Center in Sofia, Bulgaria. We are looking for a motivated individual to join us on this journey as Head of Audit IT Applications & IT Risk Management in our Group Audit division Technology, Data & Platforms.

    The Head of Audit IT Applications & IT Risk Management will play a critical part in ensuring our bank's success and integrity while overseeing audit processes related to IT Applications, ICT Providers, and Third-Party Risk Management. As an audit manager you will develop and establish a new team, drive innovative audit practices, and make impactful contributions to the bank's and Group Audit’s long-term objectives. By leveraging skills in technology, IT infrastructure, programming, and vendor management you will drive effective audit processes and especially focusing on assessments of the IT risk management, software development, technical controls, and IT services provided by third parties.

    Group Audit supports the bank in achieving its corporate objectives by independently evaluating all activities including outsourced functions, based on legal and regulatory requirements.

    Contact

    Apply now with your up-to-date CV in English!

    Only shortlisted candidates will be invited to interview.