Planning, scoping and conducting audits on IT applications and external service providers; Reporting and presenting insights and results of audits to Senior Management within and outside Group Audit; Assessing and reviewing the design and effectiveness of IT related processes, such as identity & access management, the management of security incidents and vulnerabilities, the disaster recovery and business continuity management, logging and monitoring processes; Testing interfaces, including APIs; Analysing and auditing software development, test and change processes, also in context of agile work, CI/CD, DevOps, and cloud computing; Supporting the follow-up of corrective measures from internal and external audits; Participating in regular reporting to the board of managing directors and the supervisory board.