¿Cuántos empleos de Dirección hay disponibles en Madrid?

Actualmente 422 puestos de Dirección en Madrid en AlmostHired, en 140 empresas diferentes. Nuestros datos se actualizan a diario.

¿Los puestos de Dirección ofrecen teletrabajo?

20% de las ofertas de Dirección en España permiten teletrabajo, parcial o completo. Para filtrar específicamente puestos en remoto, usa AlmostHired.

¿Cómo sé si encajo en esta oferta?

Sube tu CV — nuestra IA compara tu perfil con los requisitos del puesto y te da una puntuación de coincidencia precisa, con habilidades coincidentes y faltantes.

via Greenhouse · 18 de septiembre de 2026 ·hace 1 día

Senior Internal Audit Manager - IT & Information Security

ebury

Madrid

Este anuncio proviene de Greenhouse

Ver oferta original ↗

<div class="content-intro">Ebury helps ambitious businesses unlock global growth, and we take the same approach with our people. We encourage innovation and movement, collaboration and problem-solving, and foster an environment where everyone can feel they belong, are valued, supported and empowered to succeed.
If you’re a collaborator who wants to help transform how businesses operate globally, get in touch - we’d love to discuss how Ebury can accelerate your career so you can shape the future.</div>Senior Internal Audit Manager - IT & Information Security
Ebury Madrid Office - Hybrid: 4 days in the office, 1 day working from home per week
<h1>Role Overview</h1>
The Senior Audit Manager - IT & Information Security is a technology risk expert responsible for evaluating and enhancing the internal control environment across cloud infrastructure, cyber security controls, third-party ecosystems, and engineering platforms used in the SDLC. This candidate combines deep technical expertise in cloud security and DevSecOps with financial technology regulations (e.g., DORA, FCA PS21/3, PRA Operational Resilience, ISO 27001).
<table>
<thead>
<tr>
<th>
Qualification Area
</th>
<th>
Ideal Candidate Specification
</th>
</tr>
</thead>
<tbody>
<tr>
<td>
Target Experience
</td>
<td>
5+ years in IT/Cyber Audit within cloud-native Fintech platforms, financial institutions, or Big 4 tech practice.
</td>
</tr>
<tr>
<td>
Core Credentials
</td>
<td>
CISA, CISSP, CISM, or CRISC required; dual ACA/CIA qualification preferred.
</td>
</tr>
<tr>
<td>
Technical Stack
</td>
<td>
Cloud Infrastructure (AWS), Identity & Access Management, SIEM/SOC (Splunk, CrowdStrike, ReliaQuest), GRC (AuditBoard).
</td>
</tr>
<tr>
<td>
Regulatory Knowledge
</td>
<td>
DORA, FCA PS21/3, PRA Operational Resilience, ISO 27001, COBIT, NIST framework, and related.
</td>
</tr>
<tr>
<td>
Domain Focus
</td>
<td>
Payments lifecycle, treasury automation platforms, API security, third-party/BPO risk management.
</td>
</tr>
</tbody>
</table>
<h1>Job Purpose</h1>
The Senior Audit Manager - IT & Information Security leads the design, execution, and delivery of the annual IT Audit Plan. Reporting to the Group Head of Internal Audit, the role provides independent assurance to executive stakeholders (CIO, CISO, COO, CRO, DPO) and the Audit Committee regarding platform resilience, cybersecurity maturity, data protection, and adherence to evolving international regulatory standards.
<h1>Key Responsibilities</h1>
<h2>Technology & Cyber Security Assurance</h2>
<ul>
<li style="font-size: 10pt;">Lead risk-based audits covering cloud infrastructure (AWS), network security, Identity & Access Management (IAM), privileged access, and containerized deployment environments.</li>
<li style="font-size: 10pt;">Assess operational effectiveness of Cyber Defense controls, including SOC monitoring, Incident Response, SIEM integration (Splunk), and EDR deployments (CrowdStrike).</li>
<li style="font-size: 10pt;">Perform audits of IT General Controls (ITGCs) and automated application controls (ITACs) integrated into CI/CD deployment pipelines.</li>
</ul>
<h2>Third-Party Risk & Platform Operations</h2>
<ul>
<li style="font-size: 10pt;">Evaluate third-party vendor risk management frameworks, conducting hosted assurance reviews for critical SaaS platforms.</li>
<li style="font-size: 10pt;">Oversee control assurance frameworks for third-party partnerships, ensuring compliance with DORA and FCA PS21/3 operational resilience guidelines.</li>
</ul>
<h2>Regulatory Alignment & Compliance</h2>
<ul>
<li style="font-size: 10pt;">Assess readiness and operational adherence to key regulatory regimes, including DORA, PRA Operational Resilience, SWIFT Customer Security Programme (CSP), and ECCTA/FTP regulations.</li>
<li style="font-size: 10pt;">Conduct gap analyses and pre-assessment audits against ISO 27001 and PCI DSS standards.</li>
</ul>
<h2>Data management and privacy</h2>
<ul>
<li style="font-size: 10pt;">Evaluate data governance frameworks, data lineage, and data quality controls across enterprise analytics and reporting platforms.</li>
<li style="font-size: 10pt;">Audit data protection and privacy policies and mechanisms (such as GDPR/CCPA) applied within large-scale data storage and analytics environments.</li>
</ul>
<h2>Stakeholder Management & Governance</h2>
<ul>
<li style="font-size: 10pt;">Maintain strong relationships with technical stakeholders, including the CISO, Head of Engineering, CIO, and Chief Data Officer.</li>
<li style="font-size: 10pt;">Formulate pragmatic, risk-ranked audit findings and present formal audit reports to Executive Committees and Board Audit Committees.</li>
</ul>
<h1>Technical Competencies & Experience Requirements</h1>
<h2>Professional Experience</h2>
<ul>
<li style="font-size: 10pt;">Min 5 years experience auditing cloud-native digital architecture (microservices, containerization, API integrations).</li>
<li style="font-size: 10pt;">Track record of building or executing an annual IT risk assessment and audit plan within an engineering-driven or fast-paced Fintech environment.</li>
<li style="font-size: 10pt;">Proven capability in evaluating end-to-end payment processing controls (authorisation, clearing, settlement, reconciliation).</li>
</ul>
<h2>Certifications</h2>
<ul>
<li style="font-size: 10pt;">Certified Information Systems Auditor (CISA)</li>
<li style="font-size: 10pt;">Certified Information Systems Security Professional (CISSP)</li>
<li style="font-size: 10pt;">Certified Internal Auditor (CIA) (highly advantageous)</li>
</ul>
<h2>Skills & Competencies</h2>
<ul>
<li style="font-size: 10pt;">Ability to translate complex cybersecurity and technical risks into clear, business-focused insights for non-technical executives.</li>
<li style="font-size: 10pt;">Pragmatic approach to control framework design, balancing rapid product innovation with regulatory compliance and robust risk management.</li>
<li style="font-size: 10pt;">Strong collaborative mindset with experience in mentoring junior auditors and managing external co-source resource partners.</li>
</ul>
Why Ebury?
<ul>
<li style="font-size: 10pt;">Competitive Starting Salary with an annual discretionary bonus that truly rewards your performance from day one.</li>
<li style="font-size: 10pt;">Dedicated Mentorship: Learn directly from experienced managers who are invested in your success.</li>
<li style="font-size: 10pt;">Cutting-Edge Technology: Leverage state-of-the-art tailor made tools and systems that enable you to perform at your best.</li>
<li style="font-size: 10pt;">Clear, Accelerated Career Progression: Defined pathways to leadership and specialist roles within Ebury.</li>
<li style="font-size: 10pt;">Dynamic & Supportive Culture: Work in a collaborative environment where teamwork and personal growth are prioritized.</li>
<li style="font-size: 10pt;">Generous Benefits Package: Access competitive benefits tailored to your location, which typically include health care and social benefits.</li>
<li style="font-size: 10pt;">Central<st

Este anuncio proviene de Greenhouse. Ver anuncio original ↗

Senior Internal Audit Manager - IT & Information Security

El mercado para este tipo de puesto

Preguntas frecuentes