Senior IT Auditor, Lilium

• Proven experience in IT auditing, internal controls, or risk management, preferably in a SOX compliance environment
• Demonstrable experience and understanding of IT risk, control and internal audit practices in a SOX environment
• Strong knowledge of the Sarbanes-Oxley Act, including Section 404 requirements, and their application to IT controls and financial reporting
• Familiarity with IT frameworks and standards (e.g., COBIT, COSO) and their practical implementation in a SOX context
• Experience in performing IT risk assessments, control testing and audit procedures in alignment with SOX requirements
• Good understanding of technology, systems and data flows and how these relate to business processes
• Strong time and project management skills, with the ability to work independently and prioritize tasks to ensure work is delivered on time, to budget and to the expected quality
• Excellent analytical and critical thinking skills with a keen attention to detail
• Strong communication and people skills, with the ability to effectively collaborate with cross-functional teams and present complex information to non-technical stakeholders
• Proven ability to work in a fast-changing environment and execute with urgency, while still maintaining the ability to apply sound judgement

Desirable

• SOX compliance assessment: Conduct thorough assessments of IT controls and processes to evaluate their compliance with SOX requirements, including documentation and testing of ICFR. Identify control gaps and deficiencies and provide recommendations for remediation
• IT risk assessment: Assess IT-related risks - including those associated with financial reporting, cyber security threats, data breaches, system vulnerabilities and operation disruption - and develop strategies to mitigate those risks. Identify potential control weaknesses, data integrity issues, system vulnerabilities and other areas of concern that could impact the accuracy of financial statements
• Audit planning and execution: Develop risk-based audit plans, perform testing procedures and evaluate the design and operating effectiveness of IT controls. Coordinate with internal stakeholders to ensure efficient and timely completion of IT audits
• Control design and optimisation: Collaborate with cross-functional teams to design and implement effective IT controls that align with business processes and adequately address identified risks. Continuously evaluate control effectiveness and efficiency and propose enhancements or modifications as needed
• Documentation and reporting: Prepare detailed audit workpapers, findings and reports that document control deficiencies, testing results and recommended remediation actions. Present findings to management and provide guidance on implementing corrective measures
• Stakeholder collaboration: Partner with IT and Finance teams to foster a strong control environment and enhance understanding of IT controls and their impact on financial reporting and the business overall. Provide guidance on best practices, share knowledge and deliver training sessions to increase awareness of IT control requirements
• Emerging trends and regulations: Stay up to date with evolving SOX regulations, IT governance frameworks and industry good practices. Monitor and evaluate emerging technologies, potential risks and changes in the regulatory landscape to ensure ongoing compliance