IT Auditor – FICC recruitment

Description

The structure of Group Internal Audit (GIA) largely mirrors the structure of the Group itself. There are separate teams responsible for auditing the activities of each of the main operating Divisions, an IT Audit group, which is responsible for IT applications and infrastructure audits across all the Banks divisions; in addition, we have the Corporate Centre audit groups of the Chief Risk Auditor and the Chief Financial Auditor. The heads of each of these Divisional and functional teams report to the Head of GIA who, in turn, reports directly to the Chairman of the Board of Directors.

The approach to audit work is risk oriented, and resources are allocated to cover the key risks in the business and IT areas. The department has established standard procedures for audit techniques and documentation of work papers, and the audit process is highly automated. The work of GIA is actively supported by management, and the independent assessment of the quality of internal control is viewed as an important contributory function to the quality of management services. We seek to add value to the quality of these controls by making constructive recommendations with sustainable solutions.

Job Description

The IT Infrastructure Auditor role is a very interesting and challenging role. The role is based within the United Kingdom IT Infrastructure Audit team (London), which is responsible for providing IT Infrastructure Audit support for all business groups within UBS, with a heavy focus on the Group Technology Infrastructure Services (GTIS) group within Corporate Center which provides technology services to all business groups globally. The role provides a great opportunity for the candidate to get a good understanding of the IT infrastructure supporting UBS globally and should provide an excellent base for a long and successful career within the Bank, either within GIA or the wider business. The role currently involves minimal travel (approx. 5 to 10%), and this is not expected to increase in the foreseeable future.

This individual is responsible for undertaking both pre-implementation infrastructure reviews and production infrastructure reviews. Participation in technology consulting assignments and special project work will be necessary where appropriate. The candidate should ideally be currently either working in an internal IT audit department or be from an infrastructure or IT Security background with detailed technical skills.

Requirements

Due to the nature of the role, the candidate needs a good overall understanding of risk management and control, in relation to IT and IT services. The candidate should be an experienced professional who has carried out IT audits or has been involved in the security or control aspects of an IT function. The candidate must have a reasonable understanding of IT security risks at all levels, including operating systems, database systems, middleware, web etc. The candidate should have financial industry experience as it relates to supporting IT needs of a business, but relevant IT experience outside of the financial industry is acceptable.

Communication Skills

Has the ability to communicate clearly and effectively at all levels up to senior management. Be able to write clearly and concisely and be able to express complex technical matters in a format that is understandable by non-technical people. Be able to establish effective business relationships and influence others. Conduct interviews and/or meetings and make presentations at all levels.

Technical and Analytical Skills

Must posses excellent analytical skills to assess the effectiveness of internal controls over key IT risks, identify significant exposures, analyze transactions and other management information and detect changes in key risks and/or control effectiveness. Must be proficient in utilizing data analysis tools (e.g. Access, SQL, ACL, Excel, etc) to analyze large data sets and draw conclusions. Must possess detailed technical skills in at least one platform but requires a good understanding of multiple operating systems, databases platforms, web-based technology, and basic infrastructure control issues. Should also possess a detailed understanding of the Systems Development Life Cycle including Project Management activities, Program Change Management processes, Logical Security Controls, and Business Continuity/Disaster Recovery Processes.

In addition, this individual should take initiative and acts independently with minimal direction. Is enthusiastic and self-motivated. Is a team player that sets individual goals and objectives that are consistent with those of the group. Is dependable and meets deadlines. Takes responsibility for own development. Is customer focused and acts with integrity and honesty. Is open and willing to travel for assignments. Must be a team player and build effective relationships within Group Internal Audit-IT, other divisions of Group Internal Audit, and business and GTIS personnel.

Basic Qualifications