IT Audit Specialist

Job Posting Organization:
The World Bank Group is a prominent global partnership consisting of five institutions dedicated to addressing the most pressing development challenges faced by countries around the world. Established with the mission to end extreme poverty and promote shared prosperity, the organization has grown to include 189 member countries and operates in over 120 offices globally. The World Bank Group is recognized as one of the largest sources of funding and knowledge for developing nations, leveraging data, research, and technology to create impactful solutions. The organization is committed to fostering sustainable development and enhancing the quality of life for people in developing countries through innovative projects and partnerships.

Job Overview:
The IT Audit Specialist position at the World Bank Group is a critical role within the Internal Audit team (GIA), which is responsible for providing independent, objective, and insightful risk-based assurance and advisory services. The role is designed for individuals who are innovative thinkers, enthusiastic about their work, and enjoy collaborating within teams. The IT Audit Specialist will engage in various activities that include conducting risk assessments of business units and technologies, supporting multiple audit engagements, and delivering assurance on key technology functions such as cybersecurity and data management. This position offers the opportunity to contribute to the World Bank Group's mission by ensuring the integrity and effectiveness of its IT processes and systems, thereby enhancing the organization's ability to achieve its goals.

Duties and Responsibilities:
The duties and responsibilities of the IT Audit Specialist include performing dynamic risk assessments, supporting concurrent audit engagements, completing major components of audits related to critical technology functions, cloud-based infrastructure, and cybersecurity. The specialist will develop process descriptions and key control narratives, create audit plans, conduct tests of controls, and coordinate client interviews. Additionally, the role involves summarizing and communicating audit results, engaging closely with key clients, leading integrated IT audit work, and supporting data analytics initiatives. The specialist will be expected to maintain a continuous improvement mindset and embrace agility in their work, ensuring high-quality deliverables that meet the needs of stakeholders.

Required Qualifications:
Candidates for the IT Audit Specialist position should possess a minimum of 5 years of relevant experience, ideally within financial institutions or international organizations. While prior audit experience is not mandatory, candidates with audit or consulting experience from Big 4 firms are encouraged to apply. Preferred qualifications include over 5 years of experience with IT control and risk management frameworks, at least 3 years in planning and conducting audits or managing projects, and a minimum of 1 year of experience auditing cybersecurity controls or cloud-based solutions. A Master's degree in a relevant field is required, or alternatively, a Bachelor's degree with 7+ years of relevant experience. Certifications related to Cyber security" style="border-bottom: 1px dotted #007bff !important;">Security, Information Security, Technology, Project Management, or Auditing are highly valued, with the Certified Information Security Professional (CISSP) certification considered a plus.

Educational Background:
The educational background required for the IT Audit Specialist position includes a Master's degree in a relevant field. Alternatively, candidates may qualify with a Bachelor's degree accompanied by at least 7 years of relevant professional experience. This educational foundation is essential for understanding the complexities of IT auditing and the various frameworks and technologies involved in the role.

Experience:
The position requires candidates to have a minimum of 5 years of relevant experience, preferably in environments such as financial institutions or international organizations. While prior audit experience is not a prerequisite, candidates with experience in audit or consulting roles, particularly with Big 4 firms, will be viewed favorably. The ideal candidate will have a strong background in IT control and risk management frameworks, as well as experience in conducting audits of cybersecurity controls and cloud-based solutions.

Languages:
The mandatory language requirement for this position is English. Proficiency in additional languages may be considered beneficial but is not explicitly stated as a requirement.

Additional Notes:
This position is classified as an international recruitment opportunity with a term duration of 4 years. The World Bank Group offers a comprehensive benefits package that includes a retirement plan, medical, life, and disability insurance, as well as paid leave, including parental leave. The organization is committed to creating an inclusive work environment and does not discriminate based on gender, gender identity, religion, race, ethnicity, sexual orientation, or disability. The closing date for applications is January 9, 2026, at 11:59 PM UTC.