IT Internal Audit Manager

Luxembourg

PPRO

Boost your global e-commerce with PPRO. Activate, accept, and manage local payment methods in 85+ markets for enhanced customer trust and growth.

View all jobs at PPRO

Apply now Apply later

At PPRO, our mission is to simplify access to local payment methods and our vision is to enable the sale of goods and services to anyone in the world using their preferred way to pay. We empower partners such as Ant Group, PayPal and Stripe to access new markets, connect with more customers, and accelerate their growth.
Our strength lies in our diverse global team with 50+ nationalities and 10+ international locations- all united around one goal – to deliver the best possible products and services to our partners and customers. While our company mission is to keep innovating global commerce, our internal mission is to #chooseaction, #beopen, #thinkcustomer, #gofurther and #wintogether
The Purpose:
The IT Internal Audit Manager is responsible for leading the IT internal audit portfolio, including conducting annual and continuous IT risk assessments and delivering a robust IT audit plan. This role ensures that IT risks, processes and controls are identified, assessed, and tested in alignment with industry best practices and regulatory requirements.
As an IT Internal Audit Manager, you will be part of a central internal audit team responsible for the audit coverage of PPRO Group with enhanced focus but not limited to the entities regulated under CSSF and FCA. The team is growing, and operations are maturing which will provide great opportunities for proactive professionals.

What you will be doing/Responsibilities:

  • IT Risk Assessment & Audit Planning:
  • Lead the IT internal audit portfolio risk assessment process to identify key IT risks and emerging threats.
  • Develop and maintain an annual IT audit plan, ensuring alignment with business objectives and regulatory requirements.
  • Collaborate with business and IT leaders to ensure risk-based audit prioritisation.
  • Audit Execution & Reporting:
  • Execute end-to-end IT audits on cybersecurity, IT governance, application controls, cloud security, IT general controls (ITGCs), and emerging technologies.
  • Support business audits including but not limited to IT topics.
  • Assess IT control design and operational effectiveness in line with industry standards.
  • Maintain high quality supporting working papers and testing files in line with standards for regulated entities.
  • Deliver high-quality audit reports with actionable recommendations and risk-based insights.
  • Present audit findings and recommendations to senior management and stakeholders.
  • Manage the entire process for follow-up on audit recommendations and ensure regular reporting to governance forums and stakeholders
  • Stakeholder Engagement & Advisory Services:
  • Serve as a trusted advisor to IT and business leaders on IT risks and control enhancements.
  • Provide guidance on IT compliance, regulatory expectations, and industry best practices.
  • Continuous Improvement & Innovation:
  • Stay abreast of industry trends, regulatory changes, and technological advancements.
  • Develop and enhance audit methodologies and tools, leveraging automation, analytics, and AI-driven insights.
  • Drive a culture of continuous improvement within the IT audit function by establishing and optimizing data analytics tools and dashboards.
  • Leadership:
  • Ensure timely and high-quality delivery of audit engagements.
  • Promote a culture of integrity, accountability, and collaboration within the firm.

You will need to have:

  • Bachelor’s or Master’s degree in Information Technology, Information Security, Accounting, or related field.
  • Professional certifications such as CISA, CISSP, CRISC, CISM, or CIA preferred, or AWS cloud engineer certifications.
  • Minimum of 7-10 years of IT audit, IT risk management, or cybersecurity experience in a corporate or consulting environment. Big 4 or regulated firms.
  • Strong knowledge of IT governance frameworks, cybersecurity standards, and regulatory compliance requirements.
  • Solid understanding of DevSecOps & CI/CD requirements
  • Excellent knowledge of regulatory frameworks (CSSF/EBA, FCA, GDPR, DORA)
  • Excellent knowledge of industry standards (PCI DSS, ISO 27001, SOC2)
  • Experience in auditing IT general controls, cybersecurity, and specifically cloud security (AWS), and emerging technologies.
  • Knowledge of cloud platforms (AWS, GCP, Azure) and digital transformation risks.
  • Proficiency in audit software, data analytics, and automation tools.(Power BI, Looker Studio, JIRA/Confluence/Atlassian)
  • Excellent communication, stakeholder management, and problem-solving skills.
  • Excellent English skills - written and spoken.
What's in it for you?:
Hybrid working - We offer a hybrid structure with a 3 days / week on site expectation, so you can strike the balance between office and home working. In addition to our 30-day holiday allowance, we also provide a work from abroad policy, enabling employees to work remotely for up to another 30 days per year
Lunch Vouchers - 12,80euros x 18 / month - Enjoy a moment of conviviality and a good and balanced meal thanks to your Lunch Pass.
Enhance Family Leave - We understand the importance of family - that's why we offer enhanced family leave to support you during key life moments.
Travel Insurance - because better safe than sorry - the travel insurance is covering (partially with certain excess amounts): Sickness, Costs in relation to rescission/break-off during a travel, Luggage and Accident.
Professional and personal development - We provide leadership cafes, on-the-job    training, and access to LinkedIn learning to help you gain knowledge beyond your role. We also offer French language courses to our non native speakers employees.
Gym membership - PPRO helps contribute towards the costs of your gym membership, supporting your physical fitness journey while easing the burden on your wallet
Mental Health Platform - We’ve teamed up with a top well-being platform to provide one-on-one therapy, chat therapy, therapist-led courses, guided meditations, and more.
Our office - Located in Hollerich - two steps away from the Bouillon P+R and easily accessible with public transportations, our office is well equipped and is set up to foster team engagement and collaboration. From a walking distance to restaurants and bars, you are guaranteed to enjoy your lunches and afterworks.
Our Principles: 
We get things done: We are courageous; we take ownership, make decisions and get things done.
We act with trust and integrity: We listen first and challenge respectfully. We seek out and leverage diverse perspectives. We welcome and offer honest and open feedback, always assuming positive intent
We put the customer first: We are laser focused on delivering outstanding outcomes for our customers. We put the customer at the heart of what we do.
We make things better: We boldly explore  new ideas and have an unwavering commitment to continuous improvement.
We work as a team: We collaborate closely and value team success over individual achievement.
Apply now Apply later

* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index 💰

Job stats:  1  0  0
Category: Leadership Jobs

Tags: Analytics Audits Automation AWS Azure Business Intelligence CIA CI/CD CISA CISM CISSP Cloud Compliance Confluence CRISC Data Analytics DevSecOps GCP GDPR Governance ISO 27001 Jira PCI DSS Risk assessment Risk management SOC 2

Perks/benefits: Career development Fitness / gym Home office stipend Lunch / meals Startup environment

Region: Europe
Country: Luxembourg

More jobs like this

Explore more career opportunities

Find even more open roles below ordered by popularity of job title or skills/products/technologies used.