IT & Business Internal Auditor

**Vacancy Announcement**

BALFIN
Group is one of the most successful investment groups in the
Western Balkans. Established in 1993, the Group today
operates across Austria, Albania, Kosovo, Bosnia and
Herzegovina, Croatia, North Macedonia, Switzerland,
Montenegro, the Netherlands, Canada, and the United States of
America.

Its
diversified portfolio spans multiple sectors, including
banking, real estate development, wholesale and retail, asset
management, tourism, logistics, education, and entertainment.

With a
workforce of approximately 5,500 professionals, BALFIN Group
continues to grow steadily, guided by strong business ethics,
financial stability, innovation, and a long-term commitment
to community impact through Mane Foundation.

**Job
Position: IT & Business Internal Auditor**  
    

**Department:**  Internal Audit     

**Reports to:**  Director of Internal Audit

**Location:     Tirana**  
    

**Overview**

 
**Main Responsibilities**

·      Identify
and assess areas of significant business risk across Balfin Group companies,
including risks arising from IT systems, data and digital processes.

·      Contribute
to the preparation and execution of the annual risk-based Internal Audit Plan,
covering IT, operational, Business, and compliance areas.

·      Plan
and perform IT, operational, financial, and compliance audits, including IT
infrastructure, Information Security, ERP systems, and key business processes
(e.g. procurement, sales, inventory, payroll, treasury, financial reporting).

·      Evaluate
IT governance, Information Security, and IT operations, including IT policies
and procedures, roles and responsibilities, IT risk management, cybersecurity
controls, and monitoring mechanisms.

·      Analyze
user access rights, privileged accounts, and segregation-of-duties conflicts in
key IT and business systems, in cooperation with IT and process owners.

·      Have
knowledge of data analytics tools (advanced Excel, SQL, Power BI, ACL/IDEA or
similar) and their application in analyzing business and IT system data,
identifying anomalies, and supporting audit activities.

·      Evaluate
the design and operating effectiveness of internal controls and recommend
practical, cost-effective improvements.

·      Participate
in pre- and post-implementation reviews of new systems or major system changes
from a business process and control perspective.

·      Support
the coordination of specialized IT and cybersecurity reviews with Group IT and
external consultants, translating technical findings into business risk.

·      Prepare
work papers, process diagrams and ensure adequate audit evidence in accordance
with departmental and professional standards (IIA Global Internal Audit
Standards).

·      Conduct
ad hoc investigations into identified or reported risks, including fraud
indicators, using system data where relevant.

·      Prepare
clear audit reports with findings, risk ratings and recommendations, and ensure
complete, accurate and timely reporting to Management and/or Risk Committees.

·      Follow
up on the implementation of agreed management action plans.

·      Contribute
to the development and maintenance of internal audit policies, procedures and
methodology, including the data analytics and IT audit approach.

Perform other duties as
directed by the Director of Internal Audit.

 

*Competencies of the Job Position:*

·         Analytical
thinker with strong conceptual and problem-solving skills.

·         Ability
to understand IT systems, Information Security risks, and business processes
end-to-end, including how they are supported by technology.

·         Ability
to explain IT and technical matters in clear business language to non-technical
stakeholders.

·         Meticulous
attention to detail with the ability to multi-task.

·         Integrity,
objectivity and professional skepticism; handles confidential information with
discretion.

·         Ability
to work under pressure and meet deadlines.

·         Ability
to work independently and as part of a team.

·         Excellent
documentation, report-writing and communication skills.

·         Excellent
command of English.



### Requirements

**Qualifications and Requirements**

·         University
degree in Informatic & Economy, Computer Science, Economics, or a related
field; a combination of IT and business studies is an advantage.

·         Minimum
3 years’ experience in internal or external audit, risk or internal control;
exposure to IT audit or ITGC testing is a strong advantage.

·         Solid
knowledge of internal control frameworks and audit standards (COSO, IIA Global
Internal Audit Standards), as well as familiarity with IT governance and
Information Security frameworks (COBIT, ISO/IEC 27001).

·         Understanding
how ERP systems (e.g. Microsoft Dynamics NAV/Navision, Microsoft Dynamics 365
Business Central, Oracle, Pantheon) support business processes; knowledge of IT
general controls is an advantage.

·         Advanced
Excel skills; data analytics skills (SQL, Power BI, ACL/IDEA or similar) are
preferred.

·         Audit
certifications are preferred (ISO 27001 CIA, ACCA, CISA, etc.), completed or in
progress.

·         Willingness
to travel domestically and internationally, up to 20% of working time, as
required by audit assignments.

Driving
License, Class B.



### Benefits

**What
We Offer**

- An
attractive benefit package, including fair remuneration based
on merit and performance evaluation.
- An
exceptional opportunity to develop your skills and growth within
BALFIN Group.
- Extra
Leave days
- Recognition Rewards
- Flexible working
hours

**Application
Procedure:** To
apply for this position, please submit a CV by **November 13th , 2026.**