Performing audits of third-party service providers and the retained organization, including leading audits based on own assignment; Assisting in scoping audits based on risk assessments and pre-audit analysis; Evaluating provider controls related to governance, compliance & oversight, operational resilience & performance, cybersecurity & IT risks, data protection & access management, as well as third-party & supply chain risks; Conducting walkthroughs, testing, and documentation of audit evidence; Drafting audit findings and assisting in reporting to senior stakeholders; Working closely with audit colleagues, relevant first- and second-line units, as well as the third-party risk management function; Staying current with developments in regulations (e.g., DORA, EBA Guidelines);