Senior Group IT Internal Auditor
This is Worldline.
Worldline helps businesses of all shapes and sizes to accelerate their growth journey - quickly, simply, and securely. We are the innovators at the heart of the payments technology industry, shaping how the world pays and gets paid. Our technology powers the growth of millions of businesses across 5 continents. And just as we help our customers accelerate their business, we are committed to helping our people accelerate their careers. Together, we shape the evolution.
The Opportunity
If you want to be a part of a company that encourages personal growth in a complex and fascinating industry and see yourself enjoying driving business results, and improving business processes through collaboration – we look forward to hearing from you today. The position requires you to work and collaborate with colleagues globally.
We have many hardworking and dedicated peers who would love for you to work with them. We are committed to continuous improvement and always look for new and innovative ways to improve quality, reduce costs, build excellent solutions, and grow customer happiness. We seek an organized, innovative, process-driven colleague to join our team.
Day-to-Day Responsibilities
Key Responsibilities
- Execute and contribute to IT and operational audit missions in accordance with the internal audit methodology and professional standards (e.g., Institute of Internal Auditors standards).
- Assess the design and operating effectiveness of IT controls across areas such as:
- IT General Controls (ITGC)
- Logical and privileged access management
- Change management
- IT operations
- Incident management
- Backup and recovery processes
- Application controls and data integrity controls.
- Support audits covering IT governance, cybersecurity, data governance, cloud environments, and outsourced IT services, ensuring alignment with recognized frameworks such as COBIT, ISO/IEC 27001, and NIST.
- Contribute to audit engagements covering regulatory and industry requirements, including standards applicable to regulated environments (e.g., PCI DSS and other financial sector requirements).
- Apply data analytics and emerging AI-assisted auditing techniques to enhance audit testing, improve risk identification, and analyze large datasets for anomalies, trends, and control weaknesses.
- Document audit work performed, including risk assessments, testing procedures, and audit evidence, ensuring compliance with internal audit quality standards.
- Prepare clear and concise audit documentation, reports, and presentations, communicating findings, risks, and recommendations effectively to stakeholders.
- Participate in investigations, incident reviews, and other ad-hoc assignments as requested by management.
- Monitor and follow up on audit action plans to ensure timely remediation of identified risks and control deficiencies.
- Contribute to continuous improvement initiatives within the Internal Audit function, including enhancements to audit methodology, automation of audit procedures, and the adoption of data analytics and AI-enabled tools.
- Maintain effective collaboration with audit team members and support knowledge sharing across the department.
- Continuously develop knowledge on emerging technologies, cybersecurity risks, AI governance, cloud computing, regulatory developments, and digital transformation trends.
Skills and Competencies
Experience
- 8 + years of professional experience in IT audit, technology risk, internal audit, cybersecurity, or related functions.
- Experience within a Big Four firm (Deloitte, EY, KPMG, PwC), internal audit department, or operational/technology role within a financially regulated organization is highly desirable.
- Exposure to audit or compliance activities in financial services, payments, fintech, or regulated industries is an advantage.
Education
- Bachelor’s or Master’s degree in Information Technology, Computer Science, Information Systems, Engineering or a related discipline.
Technical Skills
- Strong understanding of internal auditing principles, risk assessment methodologies, and internal control frameworks. Understanding of recognized security and IT control frameworks, including:
- ISO/IEC 27001
- PCI DSS
- NIST Cybersecurity Framework
- COBIT.
- Knowledge of IT General Controls (ITGC) and core technology risk areas including:
- Operating systems
- Databases
- Networking
- Datacenter infrastructure
- Cloud technologies.
- Familiarity with information security principles and cybersecurity controls, including identity and access management, vulnerability management, patch management, and security monitoring.
- Practical exposure to data analysis techniques and tools (e.g., ACL, SQL, Power BI, Python, or similar analytics platforms) to support audit testing and data-driven insights.
- Basic familiarity with AI and automation technologies used in audit, including AI-assisted analysis, anomaly detection techniques, and automated control testing.
- Awareness of emerging technology trends, such as:
- Cloud security
- DevOps and software development practices
- Cybersecurity threats
- Encryption and cryptography
- AI governance and digital risk.
- Professional certifications such as CISA, CIA, CISM, CISSP, CRISC, or similar are considered a strong asset.
Soft Skills
- Strong analytical thinking and problem-solving abilities with a structured and rigorous approach.
- Good audit judgment and risk assessment capabilities.
- Effective written and verbal communication skills, with the ability to clearly present technical topics and audit findings.
- Strong report writing and documentation skills.
- Ability to work collaboratively in international and multicultural environments.
- Curiosity and willingness to learn, particularly regarding emerging technologies, cybersecurity, and data analytics.
- Organized, adaptable, and able to manage multiple tasks and deadlines.
- Fluency in English is required. Knowledge of another European language (e.g., French or German) is an advantage.
WORLDLINE does not permit the use of generative artificial intelligence (AI) tools in any stage of the recruitment and selection process, including the preparation of applications, assessments, written responses, or interviews. This includes, without limitation, the use of chatbots or language-generation tools such as Chat Generative Pre-trained Transformer (ChatGPT) or similar AI technologies.
WORLDLINE reserves the right to review and screen applications and candidate submissions to detect the potential use of such tools. Any application materials or responses prepared, in whole or in part, using generative or creative AI tools may be rejected without further consideration, at WORLDLINE’s sole discretion. WORLDLINE also reserves the right to take any additional measures deemed appropriate in such circumstances.
Learn more about life at Worldline at jobs.worldline.com
We are proud to be an Equal Opportunity employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as an individual with a disability, or any applicable legally protected characteristics.