Internal Audit, Technology Audit, Associate/Vice President (Technology Audit)

Location: Warsaw, Mazowieckie, Poland; office-based role

Company

hirify.global is a global investment banking, securities, and investment management firm founded in 1869, headquartered in New York with offices worldwide.

What you will do

• Assist with or lead risk assessments, review scoping, and planning for technology audit reviews.
• Assess technology system design and architecture, including security, availability, performance, and their impact on business-aligned technology groups.
• Evaluate technology and business processes and validate that controls meet internal and regulatory requirements.
• Document executed test steps and results in the Internal Audit workpaper repository.
• Assist with or lead audit report preparation and present review scope, progress, and results to technology, business, and internal stakeholders.

Requirements

• Minimum 3 years of work experience, including at least 1 year of auditing experience.
• Degree in Computer Science, Information Security, Engineering, or an equivalent field is preferred.
• Understanding of Linux and Windows, server and desktop security administration and configuration, batch scripting, and standard commands.
• Understanding of computer network design fundamentals, network components, cloud computing concepts, technologies, risks, and mitigating controls.
• Knowledge of security risks involving web, mobile, web services, and client/server architectures, plus encryption schemes including symmetric, asymmetric, and hashing methods.
• Understanding of vulnerability assessment and penetration testing methodologies for web, thick-client, and mobile applications.
• Understanding of threat modeling, threat intelligence, incident response, technology operations, backups, change management, monitoring, and incident/problem management.
• Understanding of business continuity planning, disaster recovery design and implementation, and security controls within the software development lifecycle.
• Familiarity with NIST Cyber Security Framework, FFIEC CAT, ISO 27001, GDPR, DORA, NYSDFS, data privacy rules, and FFIEC IT handbooks.
• Strong analytical, written and verbal communication, interpersonal, multitasking, learning, and workload-management skills; ability to collaborate across a large audit team and interact frequently with technology management.

Nice to have

• Experience with Splunk or other SIEM platforms.
• Data and log analysis and visualization experience.
• Relevant certifications or industry accreditations such as CISA, CISSP, or CISM.

Culture & Benefits

• Work in a global Internal Audit organization covering financial, technology, cybersecurity, engineering, and other firm functions.
• Professional development through training and development opportunities and firmwide networks.
• Benefits include wellness, personal finance, and mindfulness programs.
• Commitment to diversity, inclusion, equal opportunity, and reasonable accommodations during recruitment.