Main purpose of job

To provide independent assurance over technology risks, IT governance and IT controls across Provident Europe and IPF Digital by planning and delivering risk-based IT internal audits, identifying control improvements and supporting the organisation in strengthening its technology control environment.

Key accountabilities

· Plan and deliver risk-based IT internal audits across Provident Europe and IPF Digital to provide independent assurance over the effectiveness of IT governance, IT risks and technology controls.

· Assess the design and operating effectiveness of IT General Controls, cybersecurity, cloud, third-party technology and technology governance processes to identify control weaknesses and opportunities for improvement.

· Prepare clear, evidence-based audit documentation, findings and reports to support management in implementing practical and sustainable control enhancements.

· Perform risk assessments and contribute to the annual audit planning process to ensure emerging technology risks and regulatory developments are appropriately reflected in the audit universe.

· Monitor and validate the implementation of agreed management actions to confirm that identified risks are adequately mitigated.

· Build effective working relationships with business and technology stakeholders across the Group to facilitate efficient audit delivery and promote a strong control culture.

· Maintain up-to-date knowledge of technology, cybersecurity, financial services regulations and industry best practices to ensure audit work remains relevant and aligned with evolving risks.

· Take ownership of assigned audit engagements, delivering high-quality outputs within agreed timelines while maintaining independence, objectivity and professional standards.

Knowledge, skills and experience

Qualifications:

· University degree in Information Technology, Computer Science, Information Systems or another relevant discipline.

· Professional qualification such as CISA, CRISC, CISSP, CISM or CIA is an advantage.

Knowledge:

· Good understanding of IT General Controls (ITGCs).

· Knowledge of IT governance frameworks and technology risk management.

· Understanding of cybersecurity principles and information security controls.

· Knowledge of cloud technologies and third-party technology risks.

· Understanding of financial services regulations affecting technology, including DORA and related ICT risk requirements.

· Knowledge of internal auditing principles, methodologies and professional standards.

Skills:

· Strong analytical and critical thinking skills.

· Excellent problem-solving capability.

· Strong written and verbal communication skills.

· Ability to prepare concise, high-quality audit reports.

· Strong stakeholder management and influencing skills.

· Ability to work independently within an international environment.

· Strong organisational and prioritisation skills.

Essential Functional / Technical Skills:

· IT Internal Audit.

· IT General Controls (ITGC) testing.

· Technology risk assessment.

· Cybersecurity control assessment.

· IT governance reviews.

· Third-party and cloud risk assessments.

· Audit documentation and report writing.

· Regulatory compliance reviews.

· Data analytics and audit tools (advantage).

Experience:

· 3–5 years' experience in IT Internal Audit, External IT Audit, IT Risk, IT Controls or IT Compliance.

· Experience within financial services is preferred.

· Experience working across multiple stakeholders and functions.

· Experience delivering audit assignments with limited supervision.

Other:

· Fluent written and spoken English.

· High level of integrity and professional ethics.

Top 5 Essential Criteria

1. Experience in IT Internal Audit, IT Risk or IT Controls.

2. Strong understanding of IT General Controls and technology risk management.

3. Ability to independently deliver high-quality audit assignments.

4. Strong analytical, communication and stakeholder management skills.

5. Fluent English with the ability to communicate effectively in an international environment.

What’s in it for you?

• Annual bonus (depending on the business and individual performance)

• A medical subscription to one of our medical partners, Regina Maria or Medicover

• Meal vouchers of 30 lei per voucher

• Possibility to work in a hybrid system

• 21 days of vacation, plus 4 additional days of wellbeing

• Days off for seniority in the company

• A day off on your birthday

• Financial benefits for special events

• Discounts at various partners (Orange, Samsung, dental clinics, banking institutions)

• A welcoming and friendly office in the city center, near Parcul Tineretului

You will also enjoy personal and professional development programs:

• Induction program - 3 months of role-based learning, applied trainings and Buddy assigned for easy onboarding process

• Mentoring program - development sessions with relevant professionals in various areas of expertise

• Wellbeing program - networking and social events and actions

• Training and development opportunities - courses and learning opportunities on various topics through Provident Academy, technical trainings, talent growth and succession programs.