Lead Auditor Third Party Management (m/f/diverse)

The company

Commerzbank is a leading international commercial bank with branches and offices in almost 50 countries. The world is changing, becoming digital, and so are we. We are leaving the traditional bank behind us, and we are choosing to move forward as a digital enterprise.

As part of this strategy, Commerzbank continues the expansion of its Digital Technology Center in Sofia, Bulgaria. We need motivated people who will join us on this journey, and we are looking for a Lead Auditor Third Party Management in our Group Audit team.

The Lead Auditor as a senior audit specialist will play a critical role in Group Audit’s function as the third line of defense, sustainably building trust for Commerzbank’s stakeholders and strengthening the bank’s risk culture. This role will drive effective audit processes, focusing on risk management, controls, and governance. Group Audit supports the bank in achieving its corporate objectives by evaluating all activities, including outsourced functions, based on legal and regulatory requirements. The team conducts data evaluations and IT analyses to inform audits, oversees significant projects, and interacts with external entities to represent the bank’s interests, all while maintaining independence.

Your tasks:

• Performing audits of third-party service providers and the retained organization, including.
• Coaching audit teams and managing audits based on own assignment.
• Assisting in scoping audits based on risk assessments and pre-audit analysis.
• Evaluating provider controls related to governance, compliance & oversight, operational resilience & performance, cybersecurity & IT risks, data protection & access management, as well as third-party & supply chain risks.
• Conducting walkthroughs, testing, and documentation of audit evidence.
• Drafting audit findings and assisting in reporting to senior stakeholders.
• Working closely with audit colleagues, relevant first- and second-line units, as well as the third-party risk management function.
• Staying current with developments in regulations (e.g., DORA, EBA Guidelines).

Your profile:

• Experience in internal audit, external audit, risk management, or compliance.
• Management experience is considered an advantage.
• Higher demonstrable knowledge in one or more of the following domains: third-party & supply chain risks; governance, compliance & oversight; operational resilience & performance; cybersecurity & IT risks; data protection & access management.
• Experience in a specialist role, ideally within a financial services environment or with a service provider specializing in operational resilience, cybersecurity, data protection, or identity & access management.
• Knowledge of banking products and processes (e.g., payment/card processes, banking operations).
• Prior experience working in a banking or regulated financial services environment is preferred.
• Banking experience is considered advantageous.
• Strong interpersonal skills for effective collaboration with colleagues and stakeholders.
• Excellent verbal and written communication abilities for clear articulation of ideas.
• Ability to uphold ethical judgment and integrity in all activities and compliance with regulations.
• Fluency in English – both written and spoken, German would be considered an advantage;
• University degree in IT, finance or relevant.

In return we offer:

• Good work-life balance, including 25 days annual paid leave (increasing with 1 day per year up to 31 in total), flexible working hours and work-from-home and work from abroad opportunities;
• Luxury package of additional health and dental insurance;
• Food vouchers in the amount of 128 BGN monthly;
• 6 additional annual days off for exceptional circumstances
• Employee assistance program for psychological, financial and legal consultations;
• Multisport card;
• Annual contribution of 300 BGN net per child for a summer camp/school/kindergarten for children up to age of 15;
• Possibilities for building career-advancing skills by covering training/certification courses and conferences based on individual learning and development needs, access to an online learning platform;
• Opportunities for long-term professional development in a stable, 150-year-old company while contributing to the vision of a new, just starting Digital Technology Center;
• Friendly and supportive multicultural environment, open to new opinions and ideas.

Commerzbank is proud to be an equal opportunity employer, committed to creating a diverse environment. All qualified applicants will receive consideration for employment without regard to gender, race, color, national origin, religion, gender identity or expression, sexual orientation, genetics, disability, age, or any other characteristics.

Challenge accepted? Apply now with your up-to-date CV in English!

Only shortlisted candidates will be invited to interview.