Execution of the IT & Digital audit plan aligned with the companys strategic objectives, with a focus on IT risk control, information security and privacy, and regulatory compliance frameworks.
Responsibility for meeting the established deadlines, executing the tests according to the audit program and preparing the working papers and other documentation required following the internal audit methodology.
Identification of control weaknesses and opportunities for improvement, reporting findings according to the process determined by the methodology.
Delivering high-quality reports with audit results in a timely and efficient manner, showing excellent verbal and written communication.
Monitoring IT related corrective action plans to ensure their timely completion.
Close cooperation with IT, IT security, compliance, etc.
Collaboration with colleagues from GIA Teams across BUPA locations
requirements-expected :
Knowledge and experience in understanding the IT governance, risk management and IT audit principles, methods and techniques.
Extensive understanding of IT and data security principles associated with networks, email, operating systems, firewalls, VPNs, databases, virus management, intrusion detection and digital technology risks.
Minimum 4–5 years of experience in IT audit, internal controls, cybersecurity or other similar role preferably from a highly regulated industry and/or from a complex international organisation.
Governance, risk & control mindset and understanding the role of the Internal Audit.
Understanding key operational frameworks including COBIT, NIST, ITIL or ISO27000 series.
Experience in data analysis techniques to provide assurance.
Fluency in Polish and English.
Technical skills
Knowledge of operating systems (Windows, Linux), databases (SQL), computer networks, cloud technologies (Azure, AWS), and IT security tools.
Experience using data analysis and control testing tools (e.g. ACL, PowerBI, IDEA, Python, Excel, GRC tools).
