Responsibilities of the Candidate:

Independently create, compile, and maintain audit evidence to support internal and external audit requirements
Request and collect evidence from relevant teams and stakeholders across the ACDC
Ensure all evidence is accurate, complete, and delivered within required timelines
Serve as the central point of contact for all incoming audit inquiries and requests directed at the Allianz Cyber Defense Centre
Coordinate, track, and respond to audit requests in a timely and structured manner
Liaise with auditors to clarify requirements and ensure smooth audit processes
Continuously assess and improve audit-related processes and workflows within the ACDC
Identify gaps, inefficiencies, and risks in current evidence gathering and documentation practices
Develop and implement standardized procedures to enhance audit readiness
Create and maintain audit-relevant documentation in collaboration with all ACDC teams
Ensure documentation meets regulatory, compliance, and internal standards
Maintain a structured and accessible repository of audit artifacts
Work closely with all areas of the ACDC, with a particular focus on the Compliance function
Build and maintain strong working relationships with internal stakeholders to facilitate efficient evidence collection.

Requirements:

Bachelor's degree in information security, Business Administration, IT, or a related field
Experience in audit management, evidence gathering, or compliance within a cybersecurity or IT environment
Working command of the frameworks the function is measured against: ISO 27001, NIST CSF/800-53, SOC 2, and (in an EU-regulated setting) DORA, GDPR, and the EU AI Act
Excellent organizational and project management skills
Strong written and verbal communication skills in English
Ability to work independently and manage multiple priorities under tight deadline.
Exposure in AI, Agentic AI, Gen AI.
Regulatory and framework fluency
Control design and effectiveness testing
Security operations literacy (understanding of SIEM, EDR, detection engineering, incident response)
Risk assessment and prioritization
Evidence and audit-trail discipline
Incident and breach response oversight
Communication and stakeholder management