IT Audit Manager

IT Audit Manager, Poznań

Role overview

This is a global role that will involve you in IT-related initiatives across Group Internal Audit. You will be part of a dynamic, multidisciplinary team, working closely with the Integrated Information Technology team to support the organization’s ongoing efforts to enhance its internal control environment.

What you’ll be doing

Your primary tasks and responsibilities will include:

• Leading end-to-end IT audits in support of the audit plan.
• Reporting objective, fact-based audit results to relevant stakeholders.
• Recommending practical, effective, and efficient controls to address identified weaknesses.
• Identifying internal control deficiencies and providing recommendations to improve operational efficiency and effectiveness.
• Following up on management actions to mitigate risks identified in previous audits.
• Supporting internal GIA projects, including methodology development, training, and the risk-based audit planning process.

What we’re looking for 

We are looking for someone with a curious mindset, great attention to detail, and effective communication and stakeholder management skills. The ideal candidate enjoys collaboration, thrives in a dynamic environment, and demonstrates integrity, ownership, accountability and ethical business conduct.

The role requires a solid IT background, including:

• 8+ years of experience in IT audit experience, either as an external or internal auditor within an international company, covering areas such as IT General Controls, Application Controls and Project Audits.
• Experience auditing ERP systems, including systems such as SAP, Microsoft Dynamics 365, and Microsoft Dynamics NAV/Navision.
• Extensive experience in cybersecurity audits, including areas such as security governance, identity and access management, vulnerability management, incident response, third-party security risk, cloud security, and security monitoring.
• Solid understanding of IT governance, risk management, and internal control frameworks.
• Knowledge of established frameworks and standards such as ISO/IEC 27001, COBIT, NIST Cybersecurity Framework, and CIS Controls.
• Ability to assess the design and operating effectiveness of cybersecurity controls and translate technical findings into clear, risk-based messages for senior stakeholders.
• Experience using data analytics to support audit planning, testing, continuous monitoring, or control assurance will be an advantage.
• Certifications such as CISA, CISM, CISSP, ISO 27001 Lead Auditor, or similar are beneficial.

What you can expect 

We’re asking for a lot, but you’ll be well-rewarded with:

• Flexible working hours
• Working in a hybrid mode (min. 2 days in the office per week)
• Private health care, accident insurance, and MyBenefit system at your disposal
• Annual bonus
• Holiday benefit “Wczasy pod Gruszą”
• Christmas gift & MyBenefit points
• Additional holiday for Birthday & job anniversary
• Internal trainings
• Periodical beer allowance & 0% beer available at the office
• Co-financed lunch
• Social events such as e.g. Thursday Bars in the office
• Employee Referral Program
• Bike parking space
• Modern ergonomic office space with a chillout zone
• Exciting growth and development opportunities within the organization
• Working in a passionate, international environment.

We read applications continuously and vacancies may be filled anytime. We look forward to receiving your application.

Carlsberg Group: Brewing for a better today and tomorrow

For us success has always been in the diverse mix of our people, our beers and our brands. At Carlsberg, we want to recruit and develop people with a global mindset, cultural understanding, and international experience to ensure that our organization stays agile, inclusive and prepared for future growth. Only by acknowledging and harvesting from different perspectives and experiences, will we gain competitive advantage and leverage the effect of diversity for business growth. Carlsberg aims to create equal access to opportunity regardless of social identity, and we encourage everyone to apply regardless of gender, nationality, race, religion or any other characteristics protected by law.