Group Internal Audit independently reviews and assesses the appropriateness and effectiveness of the Group's internal control system (ICS), risk management, and governance processes.
This role is open to all countries in our A1 footprint and will be operated in a virtual setup.
How will you make an impact
- You lead, coordinate, and review the planning of IT audits for the whole A1 group, ensuring annual (local) audit plans are comprehensive, risk-based, and aligned across all entities.
- You guide and approve the execution and reporting of IT audit engagements like ad-hoc (incl. forensic), planned and follow-up audits.
- You review IT audit reports across all group entities, ensuring adherence to aligned methodology, regulatory obligations, and group standards.
- You oversee the evaluation of SOX management testing for effectiveness (design, implementation and operation) of group-level and local internal controls (e.g. ITGCs) and provide expert review and feedback on test documentation, audit evidence, and findings to ensure clarity, quality, and actionable recommendations.
- You facilitate the further development and harmonization of systems and toolsets used by internal audit group wide.
- You foster the enhancement of group audit processes, methodologies and the refinement of the IT audit universe, ensure implementation throughout the group and support local teams.
- You perform in-depth risk analyses, identifying group mission-critical assets and emerging risk areas.
- You serve as a key liaison with senior stakeholders, corporate functions, external auditors, and subsidiary audit heads to ensure continuous improvement and skills development.
- You drive group-wide knowledge sharing, learning solutions, and competency uplift on audit and IT risk topics.
What makes you a great fit
- Extensive (8+ years) IT audit/internal audit experience in complex, multinational organizations, with group-wide oversight responsibilities.
- Highly recognized audit certifications (e.g. CISA, CISSP, CISM, CIA) and experience with SOX, ISAE 3402, SOC reporting, or equivalent regulations.
- Deep understanding of IT frameworks and standards (ITIL, COBIT, NIST, etc.) and up-to-date knowledge of current and emerging risks.
- Demonstrated expertise in audit methodology and managing multi-entity or cross-border audit programs.
- Strong analytical, report writing, and stakeholder management skills, regulatory awareness, and a solutions-oriented working style.
- Proven ability to drive alignment, improvement, and skills development across diverse audit teams and international stakeholders.
- Fluent English (C1+); willingness to improve or develop (if necessary) German skills for business communication.
- Collaborative, innovative, and ethical leader committed to delivering high-quality outcomes.
What we offer
We build on our expertise with constant learning, offer an open environment for every individual and provide flexible working time and office arrangements.
We invite you to join us in this new world of work.
