Senior IT Auditor

About the role

Trafigura is looking for a Senior IT Auditor within its Global Internal Audit & Analytics team. You will lead and execute technology-focused audits that give independent assurance over the design and operating effectiveness of IT controls across the Group, working with IT, business stakeholders and fellow auditors. The role combines hands-on audit execution with advisory work on strategic technology initiatives.

Key responsibilities

• Plan, scope and execute IT audit engagements across the Group, including IT general controls, application controls, cloud, infrastructure and third-party technology risk reviews.
• Evaluate controls over access management, change management, IT operations and data governance, and recommend remediation.
• Cover cloud platforms (e.g. Azure, AWS), ERP systems and core business applications, including configuration, security, integrations and segregation of duties.
• Work with the Audit Analytics team to bring data-driven testing into IT audits.
• Prepare well-evidenced audit reports and share findings, root causes and recommendations with senior IT and business leadership.
• Give advisory input on IT projects, system implementations and transformations so control issues are addressed early.
• Monitor remediation of findings and validate that management action plans are implemented and closed on time.
• Contribute to improving the IT audit methodology, tools and use of automation and AI-powered techniques.

Required profile

• Bachelor's or Master's degree in IT, computer science, information systems, cybersecurity or a related field; equivalent experience also considered.
• 4-6 years of experience in IT audit, information security, technology risk management, IT controls advisory or a related area.
• Demonstrated experience auditing ITGCs, application controls, cloud infrastructure and third-party IT risks.
• Exposure to ERP systems, cloud environments or enterprise applications.
• Strong knowledge of IT audit frameworks and standards (COBIT, NIST, ISO 27001).
• Preferred: professional certification such as CISA, CISM or CRISC.

Required skills

• Understanding of SDLC, change management or DevOps is an advantage.
• Comfort with data analytics and AI-powered tools, and willingness to adopt emerging techniques.
• Strong analytical, communication and stakeholder-management skills, with excellent English writing, verbal and presentation abilities.