AI and Applications Audit Senior Specialist

### **Overview** Within the Chief Audit Officer Department, you will join the ICT and Security Audit team and help strengthen the Group's digital resilience. The role involves carrying out audits of ICT processes and of Artificial Intelligence and Generative AI systems, with the aim of assessing their governance, reliability, transparency and compliance, in an international, innovative and constantly evolving context. ### **What you will do** - Carry out audits of ICT processes and of Artificial Intelligence and Generative AI systems, assessing their governance, reliability, transparency and compliance. - Assess the adequacy of the AI Governance framework, verifying roles and responsibilities, approval processes, classification of use cases, risk management and continuous monitoring. - Verify the entire lifecycle of AI solutions: design, development, training, validation, release, monitoring and decommissioning. - Analyse controls related to data quality, explainability, bias, hallucinations, prompt injection, data leakage and misuse of information. - Prepare audit intervention reports and monitor the implementation of action plans agreed with the structures involved. - Contribute to the evolution of audit methodologies and to the analysis of risks related to Artificial Intelligence, collaborating with technical and business stakeholders. ### **Who we are looking for** If you have the following characteristics, we are waiting for you: - Degree in computer science, engineering, mathematics, economics or related fields - Information Technology, Artificial Intelligence, Data Governance, Risk Management or Internal Audit - Artificial Intelligence, Machine Learning and Generative AI, including their lifecycles - Risks of AI systems: bias, hallucinations, prompt injection, data leakage, data quality, explainability and misuse of information - AI Governance, risk management and main AI platforms and technologies - English language at least at B2 level on the CEFR scale Preferred qualifications include in-depth knowledge of the AI Act, NIST AI Risk Management Framework, ISACA AI Framework, ISO IEC 42001, COBIT and ISO IEC 27001, as well as certifications in Artificial Intelligence, Data Analytics, Internal Audit or Risk Management. 3 to 5 years of experience in: Cybersecurity, IT Audit, Information Security or related activities are required. Candidates with significant professional or academic experience in international contexts will be given preference. ### **What we offer** - Gross annual salary starting from €46,000 - The Group provides a variable component of remuneration as regulated by the Remuneration Policies available on the Group website - Complementary elements governed by the National Collective Labour Agreement for Credit and second-level company agreements - Professional development initiatives supporting the growth of our people - Wide training offer through the Corporate Academy, dedicated to the continuous development of professional, managerial and transversal skills at all levels - Possibility to opt for flexible working and the 4x9 short week - Modern and integrated corporate welfare system ([link](https://group.intesasanpaolo.com/it/careers/perche-intesa-sanpaolo/welfare-e-benefit)) - Health coverage and supplementary pension from the date of hiring - Advantages on the Group's banking products and services ### **About us** We are leaders in Italy and one of the main banking groups in Europe. Join us and be part of our success story! With over 20 million customers in Italy and abroad, we are a true engine of sustainable growth with a strong commitment to the environment and a tangible impact on society. People are at the centre; we take care of them by committing to create an inclusive culture within the Group where everyone feels like a protagonist and valued. _Join our international reality. The future does not wait, it is chosen!_ **_#sharingfuture_** **_We guarantee an inclusive environment and equal opportunities. We will consider all applications regardless of race, religion, sexual orientation, gender identity, marital status, age, disability or any other protected category in compliance with Legislative Decrees 198/2006, 215/03 and 216/03._** _**For the evaluation of applications, the data will be used by Intesa Sanpaolo S.p.A. as Data Controller. We invite you to read the dedicated [Privacy Notice](https://performancemanager.successfactors.eu/doc/custom/intesasanp/Information_privacy_V3.pdf).**_