Internal IT Auditor

What you will do

• Perform risk-based, corporate internal IT audits mainly for IT infrastructure and company systems in the scope of IT managed services by Kyndryl delivered to customers, which is Kyndryl core business. Kyndryl is one of world's largest provider of IT infrastructure services.
• Assess complex IT systems, environments, and controls, by observations and inspections, including but not limited to cloud hosting environments settings, network infrastructure, operating systems, databases, applications, IT controls and processes (e.g. in systems configuration, identity and access management, integrated service management, code deployment, change management, incident management, patch management, data integrity and protection, inventory management, vulnerability management, disaster recovery, risk management).
• Implements an audit framework to give reasonable assurance of design and effectiveness of IT controls, settings in IT environments in assurance audit engagements and provides advice in IT advisory engagements.
• Performs of all phases of the IT audit engagements, including, but not limited to, planning and scoping, identification and evaluation of risks and opportunities, developing and conducting testing, including technical testing, to evaluate the design and the effectiveness of processes and controls, identifying and reporting findings, suggesting recommendations for improvements to Kyndryl's processes, controls, settings and following up actions with audit client.
• Maintain audit documentation that supports conclusions and enables audit quality reviews.
• Build working knowledge of Kyndryl's operations, risk profile, and regulatory environment to support effective audits.
• Assists with other projects and various internal and team tasks as they may arise.

Required skills and experience

• 5+ years of experience in IT areas, at least in one of those in administration or audit: cloud, Windows, Linux, database, network, mainframe, storage
• Knowledge and understanding of IT concepts, IT and security risks, controls, processes
• Analytical and critical thinking skills
• Able to perform analysis of the process and associated risks, develop and conduct testing to determine if controls and settings are effective to mitigate or manage risks, communicate the impact for achieving objectives, and suggest meaningful recommendations
• Professional communication, both verbally and in writing, in English with technical and non-technical audiences, audit clients, audit team members, and management
• Deliver results on time in a good-quality manner
• Team player, able to work in global teams, on-site and remotely
• Willingness to travel globally, based on business need

Preferred skills and experience

• 7+ years of experience in IT areas administration or audit, preferably in: cloud (Azure, AWS, Google), Linux, Windows, mainframe, network, database, storage, DevSecOps, AI
• Knowledge of security, internal controls, audit and risk management frameworks and concepts, e.g. ISO27000, COSO, NIST, Cobit, IPPF, ITIL
• Knowledge and experience with at least one of those DORA, NIS2, PCI DSS, GDPR and similar IT relevant legislative requirements, mainly in EU
• Knowledge and experience with audit/review of IT controls, processes and security settings, e.g. in systems configuration, identity and access management, integrated service management, code deployment, change management, incident management, patch management, data integrity and protection, inventory management, vulnerability management, security assessment, disaster recovery, risk management, governance
• Understand and execute the audit process using a risk-based audit approach, understand the objectives, perform analysis of the process and associated risks, develop and conduct formal testing to determine if controls are effective to mitigate or manage risks, communicate the impact for achieving objectives, and develop recommendations, preparing a findings and audit report that communicates an effectiveness status for each risk
• Effectively and professionally presents and communicates issues, risks and technical information in a clear and concise manner to technical and non-technical audiences in English
• Possession of IT or audit area certifications: for platforms, e.g. cloud, from Microsoft, Amazon, Google, IBM, Cisco;

CISA, CISSP, CRISC, CCSK, CDPSE, AAIA, AAISM, AAIR, CAC, OSCP, CKA, CGEIT, CISM, CRISC, ITIL, CIA, CPA, CRMA, ISO, QSA, PCI, or other relevant

• Strong analytical and critical thinking
• Excellent time management
• Experience with leading team of auditors

The salary range for the position in Slovakia is 2230 to 4000 EUR based on a full-time schedule at the time of posting. Your final compensation offer may vary depending on several factors such as job-related skills, education and experience that selected candidates bring to the team. For part time roles, the compensation will be adjusted appropriately. The pay or salary range will not be below the local minimum wage requirement.