IT & Business Internal Auditor

About the role

BALFIN Group, an investment group active across many countries since 1993, is hiring an IT & Business Internal Auditor in Tirana. The role reports to the Director of Internal Audit and covers IT, operational, business and compliance audit areas.

Key responsibilities

• Identify and assess significant business risks, including those arising from IT systems, data and digital processes.
• Contribute to the annual risk-based Internal Audit Plan and plan and perform IT, operational, financial and compliance audits.
• Evaluate IT governance, information security and IT operations, including policies, roles, risk management and cybersecurity controls.
• Analyse user access rights, privileged accounts and segregation-of-duties conflicts with IT and process owners.
• Evaluate internal controls and recommend practical improvements; take part in pre- and post-implementation reviews of new systems.
• Support IT and cybersecurity reviews with Group IT and external consultants, translating technical findings into business risk.
• Prepare work papers, process diagrams and audit reports with findings, risk ratings and recommendations, and follow up on management action plans.
• Carry out ad hoc investigations of risks and fraud indicators, and contribute to internal audit policies and methodology.

Required profile

• University degree in Informatics & Economy, Computer Science, Economics or a related field; a mix of IT and business studies is an advantage.
• Minimum 3 years' experience in internal or external audit, risk or internal control; IT audit or ITGC testing is a strong advantage.
• Solid knowledge of COSO and IIA standards, and familiarity with COBIT and ISO/IEC 27001.
• Knowledge of ERP systems (Microsoft Dynamics NAV/Navision, Dynamics 365 Business Central, Oracle, Pantheon) and IT general controls is an advantage.
• Audit certifications such as CIA, ACCA or CISA are preferred.
• Willingness to travel up to 20% of working time and a Class B driving licence.

Required skills

• Advanced Excel; data analytics with SQL, Power BI, ACL/IDEA or similar is preferred.
• Ability to explain IT and technical matters clearly to non-technical stakeholders.
• Excellent English.

What we offer

• Remuneration based on merit and performance evaluation.
• Flexible working hours.
• Opportunities for skill development within the Group.

Candidates apply by submitting a CV by 13 November 2026; only selected candidates will be contacted.