Senior IT Auditor (m/f)

BNP Paribas Bank Polska S.A. is a universal bank in Poland listed since 2011 on the Warsaw Stock Exchange and part of the BNP Paribas Group present in 64 countries. The bank provides services to retail clients, Wealth Management, and companies in micro, SME, and corporate banking segments.

• Higher education in computer science, mathematics, or related fields.
• Minimum 2 years professional experience in IT audit or IT control.
• Knowledge of IT management processes including IT governance, application development and maintenance, production, continuity, cybersecurity, and third-party IT management.
• Basic knowledge of IT technologies such as DBMS, OS, LAN/WAN/WLAN/SAN.
• Basic knowledge of cybersecurity technical solutions, including IAM, firewall, SIEM, SOAR systems.
• Familiarity with major IT audit, control, and security standards such as COBIT, ITIL, ISO 27000, MITRE ATT&CK.
• Proficiency in English enabling full communication.
• Knowledge of Microsoft Office 365 (Word, Excel, PowerPoint, Outlook).
• Self-reliance, excellent work organization, analytical skills, teamwork ability, accuracy, and reliability.

Nice to have:

• Certifications such as CISA, CIA, CISM, CISSP, CEH and experience in the IT industry.
• Knowledge of the Ukrainian language is an additional advantage.

• Perform IT and cybersecurity audits in BNP Group units in Poland and Ukraine within the third line of defense.
• Identify risks in IT/cybersecurity areas, prepare audit plans, scopes, and methodologies.
• Present audit approach to auditees, establish audit tests and sample selection.
• Formulate findings and recommendations.
• Prepare and verify post-audit documentation, including audit reports.
• Conduct annual IT/cybersecurity risk analysis for BNP Group units.
• Document work in IT systems according to internal standards and Inspection Generale BNP methodology.
• Verify and assess the implementation of audit recommendations.
• Analyze selected issues, incidents, projects, and activities.

The data controller is BNP Paribas Bank Polska S.A. located in Warsaw. Personal data will be processed for recruitment purposes. Providing mandatory data under the Polish Labour Code is obligatory, while additional data is voluntary. Data will be stored until the end of the recruitment process and potential claims period, or until consent withdrawal for future recruitments. Candidates have rights to access, rectify, delete, restrict processing, object, and data portability, and may file complaints with supervisory authorities.