Senior IT Auditor

Main purpose

As a Senior IT Auditor within the Global Internal Audit & Analytics team, you will lead and execute technology-focused audits that provide independent assurance over the design and operating effectiveness of IT controls across the Trafigura Group. Working closely with IT, business stakeholders, and fellow auditors, you will assess technology risks and controls, and deliver insights that strengthen the Group's technology risk posture. The role combines hands-on IT audit execution with advisory involvement on strategic technology initiatives, making experience across both traditional IT audit and emerging technology risks highly valuable. 

Key responsibilities

• Plan, scope, and execute IT audit engagements across the Group, including IT general controls (ITGCs), application controls, cloud, infrastructure, and third-party technology risk reviews.

• Evaluate the design and operating effectiveness of controls over access management, change management, IT operations, and data governance, identifying gaps and recommending pragmatic remediation.

• Evaluate controls across cloud platforms (e.g., Azure, AWS), ERP systems, and core business applications — covering configuration, security, integrations, and segregation of duties.

• Collaborate with the Audit Analytics team to integrate data-driven testing into IT audit engagements, improving coverage, efficiency, and insight.

• Prepare clear, well-evidenced audit reports and communicate findings, root causes, and recommendations to senior IT and business leadership.

• Provide advisory input on IT projects, system implementations, and transformation initiatives to ensure control considerations are addressed early in the lifecycle.

• Monitor the remediation of audit findings, validating that management action plans are implemented effectively and closed on a timely basis, with sustained control improvements.

• Contribute to the continuous improvement of the IT audit methodology, tools, and use of automation and AI-powered techniques to enhance the audit function.

Required qualifications

• Bachelor's or Master's degree in Information Technology, Computer Science, Information Systems, Cybersecurity, or a related discipline; equivalent relevant experience will also be considered.

• 4-6 years of experience in IT audit, information security, technology risk management, IT controls advisory or a related area.

• Demonstrated experience auditing ITGCs, application controls, cloud infrastructure, and third-party IT risks.

• Exposure to ERP systems and their control environments, cloud environments, or enterprise applications.

• Strong knowledge of IT audit frameworks and standards (e.g., COBIT, NIST, ISO 27001) and their practical application in an internal audit context.

• Understanding software development lifecycle, change management, or DevOps practices will be considered a strong advantage.

• Comfort working with data analytics and AI-powered tools to enhance audit testing, with a willingness to adopt and explore emerging techniques.

• Strong analytical, communication, and stakeholder-management skills, with the ability to translate technical findings into clear business impact.

Preferred qualifications

• Professional certifications such as CISA, CISM, CRISC, or equivalent will be considered an asset.

Attributes for success

• Excellent writing, verbal, and presentation abilities in English.

• Strong interpersonal capabilities - Effective collaboration and interaction with all organizational levels in diverse, global environments

• Problem solver and critical thinker who can recognize opportunities for boosting efficiency and effectiveness.

• Independent and flexible team player, with strong analytical skills.

• Ownership and accountability in a fast-paced environment.

• Strong attention to detail.

• Firm, decisive, and focused approach.

Department overview

The Internal Audit and Analytics department supports management across the Group in assessing the design effectiveness of processes, as well as relevant risks and controls for the governance, trading, IT and support processes. Results of these activities are reported to the Board of Directors, the Audit Committee, and Senior Management accompanied by action plans to improve process design, strengthen controls and further mitigate risks where required.

Reporting Structure

Reporting directly to the Head of Audit Analytics.

Equal opportunity employer

We are an Equal Opportunity Employer and take pride in a diverse workforce! We do not discriminate in recruitment, hiring, training, promotion or other employment practices for reasons of race, colour, religion, gender, sexual orientation, national origin, age, marital or veteran status, medical condition or handicap, disability, or any other legally protected status.