Job Description:
DB Global Technology is Deutsche Bank’s technology centre in Central and Eastern Europe. Since its set-up in 2013, Bucharest Technology Centre (BEX) has constantly proven its capacity to deliver global technology products and services, playing a dynamic role in the Bank’s technology transformation.
We have a robust, hands-on engineering culture dedicated to continuous learning, knowledge-sharing, technical skill development and networking. We are an essential part of the Bank’s technology platform and develop applications for many important business areas.
Are you a highly organized and detail-oriented professional with a passion for cybersecurity and compliance? We are seeking an experienced Audit Manager to join our team. In this role, you will be instrumental in overseeing and coordinating a wide range of audits and assessments to ensure our organization's security posture and compliance with internal policies and external regulations. You will serve as the primary point of contact for auditors, working closely with various internal teams and external stakeholders to drive successful outcomes. This position requires a strong technical understanding of security systems and a strategic mindset to navigate complex audit requirements.
Responsibilities
- Serve as the primary liaison between internal business units and external auditors/assessors. Coordinate various audits, collection and review of evidence, ensuring all documentation is accurate, complete, and aligned with audit requirements.
- Lead the planning, execution, and management of all audit-related activities, including internal audits, regulatory audits (e.g., SOX, SOC 2 etc.), internal assessments, and external security assessments.
- Track, manage, and drive the timely remediation of internal and external audit findings and control gaps, coordinating across teams to ensure robust, sustainable closures.
- Proactively identify, assess, and escalate emerging risks and operational gaps across business workflows, ensuring key vulnerabilities are captured before they impact the organization.
- Perform comprehensive risk and impact analyses to quantify potential exposure and presenting it for executive management review and strategic decision-making.
- Evaluate the technical effectiveness of security controls and their alignment with regulatory requirements.
- Translate complex audit findings and technical security concepts into clear, actionable insights for management.
- Provide regular updates to leadership on audit status, key risks, and compliance posture including but not limited to Remediation and Continuous Improvement, assist in the development of corrective action plans to address audit findings and control gaps.
Well-being & Benefits
Emotionally and mentally balanced: * Empowering managers who value your ideas and decisions. Show your positive attitude, determination, and open-mindedness. * A professional, passionate, and fun workplace. * A modern office with fun and relaxing areas to boost creativity. * Continuous learning culture with coaching and support from team experts. * A culture where you can openly speak about mental health.
Physically thriving: * Private healthcare and life insurance with premium benefits for you and discounts for your loved ones, healthier ways of working and check-ups.
Socially connected: * 24 days holiday, loyalty days, and bank holidays (including weekdays for weekend bank holidays). * Hybrid working model with 40% remote work. * Options for flexible working hours. * Enjoy retailer discounts, cultural and CSR activities, workshops, and more.
Financially secure: * Competitive income, performance-based promotions, and a sense of purpose. * Meal vouchers, bonuses for referrals
Skills
- Understanding of Governance, Risk and Compliance (GRC) and Integrated Risk Management (IRM) approach.
- Strong understanding of industry standards and frameworks including ISO27001 and NIST 800 SP 53 rev.5.
- Possess a strong understanding of core cybersecurity principles and the working components of a modern security stack.
- Demonstrate knowledge of security tools and technologies such as SIEM (Security Information and Event Management), EDR (Endpoint Detection and Response), and vulnerability scanners.
- Excellent written and verbal communication skills, with the ability to present complex information clearly and concisely.
- Strong project management and time-management skills, with the ability to manage competing priorities effectively.
- Relevant professional certifications such as CISA (Certified Information Systems Auditor), CISSP (Certified Information Systems Security Professional), or CRISC (Certified in Risk and Information Systems Control), ISO27001 Lead Auditor certification are highly desirable.
