IT Auditor

About This Role

This IT Auditor role is within the IT & Operations Audit Center of Excellence (CoE) at Generali Investments Holding, overseeing audit activities across digital technologies and operational models for the company and its international subsidiaries. The position provides independent assurance on the effectiveness of technology-related controls, risk management frameworks, and operational processes, supporting the organization in enhancing agility, innovation, operational resilience, and service delivery.

Responsibilities

• Plan, execute, and document IT audit engagements covering systems, infrastructures, applications, and IT processes across Group companies
• Assess the effectiveness and adequacy of IT controls, including access management, change management, cybersecurity, business continuity, and third-party/vendor management
• Evaluate compliance with IT regulations and industry requirements, with particular focus on DORA (Digital Operational Resilience Act) and other applicable financial services regulations
• Collaborate with local teams across Italy and international Group entities to collect evidence and perform audit activities
• Prepare clear, accurate, and structured audit reports in English for senior management and international stakeholders
• Monitor and follow up on the implementation of remediation actions agreed with management
• Contribute to the ongoing IT risk assessment activities and support the annual audit planning process
• Support the continuous enhancement of audit methodologies, tools, and innovative approaches, including data analytics and emerging technologies

Requirements

• Master’s degree in computer science, Information Technology, Engineering, Economics, or a related field
• 3-5 years of experience in IT Audit, IT Risk Management, IT Consulting, or related areas
• Good knowledge of IT audit frameworks and methodologies such as COBIT, ISO 27001, and ITIL
• Solid understanding of IT risks and controls related to cybersecurity, data governance, cloud infrastructures, and operational resilience
• Knowledge of DORA and other IT regulatory requirements applicable to the financial services industry
• Excellent command of English, both written and spoken
• Availability to travel internationally when required
• Proficiency in Microsoft Office applications, particularly Excel and PowerPoint

Nice to have:

• Professional certifications such as CISA, CISM, CRISC, or equivalent
• Knowledge of AI-based solutions, automation, data management, or data analytics applied to audit activities
• Previous experience within the asset management, insurance, or financial services sector
• Experience working in international and multicultural environments