What does An IT Auditor / GRC Specialist do?
Assesses an organisation's IT controls, security posture, and regulatory compliance, running audits and building governance, risk, and compliance (GRC) frameworks that satisfy internal, external, and FINMA regulatory requirements.
Day-to-day responsibilities
- Planning and executing IT audits against control frameworks like COBIT and ISO 27001
- Documenting findings and remediation plans
- Maintaining GRC tooling and risk registers
- Liaising with external auditors and FINMA during regulatory reviews
Low demand+16% CISA / CISM certification+13% ISO 27001 lead auditor+17% FINMA regulatory audit experience