Internal Auditor - IT Auditor - European Commission (AD5, Brussels)

About this position

The summary below is published by European Commission on the official vacancy notice. Our own analysis — salary realism, comparable openings, career trajectory, language profile — follows further down the page.

Key responsibilities

According to the vacancy notice, the role centres on the following duties:

• Participate in various IT audit engagements assessing and enhancing IT governance and management
• Assess IT operations, IT security, and IT systems
• Provide practical and effective recommendations and advice
• Contribute to audit process from planning phase to audit report preparation
• Provide IT audit assistance to operational and financial audit teams
• Perform integrated audits with IT and non-IT auditors
• Address IT-related issues at EC level
• Assist in improvement of audit methodology and internal procedures

Are you eligible?

Check these requirements from the notice before investing time in an application:

• Education: Completed university studies of at least 3 years attested by a diploma
• Experience: At least 3 years of proven professional experience as an IT auditor
• Languages: One of the 24 official EU languages (C1), A second official EU language (B2)
• Key skills: Strong written and oral communication skills, Ability to work well within a team, Strong interpersonal skills and ability to build and maintain relationships with stakeholders, Initiative and good judgment, Knowledge and understanding of audit principles and methodologies, Sound knowledge of IT governance, project management, information security, IT security, cybersecurity and ICT management, Experience and knowledge in assessing, implementing, and auditing data protection frameworks and compliance, Experience and knowledge in assessing, implementing, and auditing artificial intelligence frameworks including EU AI Act compliance, Knowledge of main IT/IT security/cybersecurity control frameworks and standards (IIA, COBIT, ISO 27k, NIST Cybersecurity framework, OWASP, ITIL), Knowledge of risk management and relevant audit techniques
• Eligibility: Citizen of an EU Member State and enjoy full rights as a citizen; have fulfilled any obligations imposed by applicable laws concerning military service; physically fit to perform the duties linked to the post; produce appropriate character references as to suitability for the performance of the duties

Selection process

The notice describes the following selection steps:

• Selection panel chooses limited number of candidates for interview based on CV and application form
• Interview
• Pre-recruitment medical check-up

Contract and working arrangements

Contract duration: Up to 4 years, renewable once for a maximum of 2 years.

Working arrangements: Place of employment will be Brussels.

Hiring unit: IAS.A.3.

Position details

Reference

IAS/COM/2026/001

Directorate-General

IAS - Internal Audit Service

Vacancy Notice

Download PDF

Last Verified

16 September 2026

Position overview

This is the official EU Careers listing for Internal Auditor - IT Auditor at European Commission based in Brussels at the AD5 grade level (Temporary Agent). The vacancy reference is IAS/COM/2026/001. It is hosted by IAS - Internal Audit Service, the Directorate-General responsible for this policy area. The role falls under the Audit domain.

We propose several interesting opportunities for talented and motivated IT Auditors to join the IAS.A.3, a team of 14 highly committed and qualified professionals, working in a collaborative and welcoming environment. The successful candidates will participate in various IT audit engagements aimed at assessing and enhancing IT governance and management, IT operations, IT security, and IT systems by providing practical and effective recommendations and advice. They will contribute to the audit process, from the planning phase (including the preliminary risk assessment) to the preparation of the audit report. In addition, they will provide IT audit assistance to operational and financial audit teams and perform integrated audits with IT and non-IT auditors. They will also address IT-related issues at the EC level, as well as contribute to the evolution of the Internal Audit Service by assisting in the improvement of audit methodology and internal procedures.

WE LOOK FOR

We look for several highly motivated, dynamic, reliable, well-organised and detail-oriented persons, with a high standard of professional and technical competence. Strong written and oral communication skills are essential, along with the ability to work well within a team, demonstrate strong interpersonal skills (able to build and maintain relationships with stakeholders), show initiative, and exercise good judgment.

The successful candidates should have:

- # a proven professional experience of at least 3 years as an IT auditor;

- # a good knowledge and understanding of audit principles and methodologies;

- # a professional certification in internal and/or IT auditing (CISA, CIA or CGAP) and/or in information security (CISM or equivalent) and/or in IT/cyber security (CISSP or equivalent);

- # a sound knowledge of IT governance, project management, information security, IT security, cybersecurity and ICT management;

- # a previous experience and knowledge in assessing, implementing, and auditing data protection frameworks and compliance with applicable regulations;

- # a previous experience and knowledge in assessing, implementing, and auditing artificial intelligence frameworks including compliance with applicable regulations (for example EU AI Act);

- # a good knowledge of the main IT / IT security / cybersecurity control frameworks and standards (e.g. IIA, COBIT, ISO 27k, NIST Cybersecurity framework, OWASP, ITIL), risk management and relevant audit techniques;

- # the ability to analyse complex situations, to come to sound conclusions and make appropriate recommendations;

- # a strong motivation and willingness to grow and develop within our team, and a clear propensity for self-improvement;

- # the ability to draft and communicate clearly and concisely in English.

The following would be a strong asset:

- # a sound knowledge and understanding of internal control and risk management frameworks in the Commission, especially in the IT security and cybersecurity domain;

- # a previous experience in IT / IT security / cybersecurity audits in the European Commission, EU Institutions, agencies or other bodies;

- # a strong understanding of data security controls, encryption, and privacy risk management within IT systems, including knowledge of standards and best practices for safeguarding sensitive information;

- # good working knowledge of project management frameworks, software development methodologies and IT operations (e.g. PM², PRINCE2, SAFe, SCRUM, DevSecOps);

- # experience in performing vulnerability assessments, penetration testing, ethical hacking or similar;

- # experience in using digital auditing techniques (e.g. data analytics, process mining, text mining, AI) in the context of IT audits;

- # knowledge of financial/budgetary procedures.

HOW TO EXPRESS YOUR INTEREST?

You should send your documents in a single pdf in the following order:

1. your CV 2. completed application form.

Please send these documents by the publication deadline to [email protected] indicating the selection reference IAS/2026/001 in the subject.

No applications will be accepted after the publication deadline.

ANNEX

1. # Selection

- # Am I eligible to apply?

You must meet the following eligibility criteria when you validate your application:

Our rules provide that you can only be recruited as a temporary agent at the European Commission if you:

General criteria:

- Are a citizen of a Member State of the EU and enjoy full rights as a citizen

- Have fulfilled any obligations imposed by applicable laws concerning military service

- Are physically fit to perform the duties linked to the post

- Produce the appropriate character references as to suitability for the performance of the duties.

Qualifications:

In order to be recruited for this position, you must have at least a level of education which corresponds to completed university studies of at least 3 years attested by a diploma.

Only qualifications issued or recognised as equivalent by EU Member State authorities (e.g. by the Ministry of Education) will be accepted. Furthermore, before recruitment, you will be required to provide the documents that corroborate the eligibility criteria (diplomas, certificates and other supporting documents).

Languages:

- have a thorough knowledge (minimum level C1) of one of the 24 official languages of the EU2

- AND a satisfactory knowledge (minimum level B2)of a second official language of the EU, to the extent necessary for the performance of the duties.

- # What about the selection steps?

The post was published internally within the Commission, inter-institutionally, and brought to the attention of competition laureates.

In accordance with Article 29 of the Staff Regulations, applications from Commission officials, officials from other Institutions, and laureates of competitions have priority3. If these candidates do not best fit the requirements for the position, the Commission can recruit a temporary agent.

For temporary agents under Article 2(a) of the Conditions of Employment of Other Servants, the post is published directly on the EPSO website, without mandatory prior internal publication.

A selection panel will choose a limited number of candidates for interview, based on the CV and application form that they submitted. Due to the large volume of applications, we may receive, only candidates selected for the next step of the selection phase will be notified.

For operational reasons and in order to complete the selection procedure as quickly as possible in the interest of the candidates and of the institution, the selection procedure will be carried out in English.

1. # Recruitment

The candidate selected for recruitment will be requested to supply documentary evidence in support of the statements made in their application.

The successful candidate will be required to undergo a mandatory pre-recruitment medical check-up, carried out by the Commission.

- # Type of contract and working conditions

The place of employment will be Brussels.

In case the successful candidate is not an official or a competition laureate, they will be recruited as a temporary agent under Article 2(b) of theConditions of Employment of Other Servants, in function group AD.

- Grade

The recruitment grade, as well as the step in that grade, will be determined in accordance with Commission Decision C(2025)4716 on policies for the engagement and use of temporary agents and with Commission Decision C(2013)8970 laying down the criteria applicable to classification in step on engagement.

The recruitment grade will be calculated based on the qualifications and the number of years of professional experience, according to Art. 13 of the Commission Decision C(2025)4716. Higher grades may be granted exceptionally.

The duration of the 1stcontract will be up to 4 years. The contract might then be extended only once for a maximum of 2 years and in the interest of service, in accordance with Commission Decision C(2025)4716 on policies for the engagement and use of temporary agents.

All new staff have to successfully complete a 9-month probationary period.

The pay of staff members consists of a basic salary supplemented with specific allowances, including, where applicable, expatriation and family allowances. The provisions guiding the calculation of these allowances can be consulted in the Conditions of Employment of Other Servants. As a member of staff of the European institutions, your pay is subject to a tax raised by those institutions.

The European Commission applies a policy of equal opportunities and non-discrimination in accordance with Article 1d of the Staff Regulations.

Should you need further information on working conditions, please refer to Working conditions and benefits of EU Careers.

For information related to Data Protection, please see the Specific Privacy Statementunder “7. Information to data subjects on their rights”, to find your rights and how to exercise them in addition to the privacy statement, which summarises the processing of your data.

1Please note that the list of underrepresented Member States may be subject to future amendment based on potential data changes over time.

2The official languages of the European Union are: BG (Bulgarian), CS (Czech), DA (Danish), DE (German), EL (Greek), EN (English), ES (Spanish), ET (Estonian), FI (Finnish), FR (French), GA (Irish), HR (Croatian), HU (Hungarian), IT (Italian), LT (Lithuanian), LV (Latvian), MT (Maltese), NL (Dutch), PL (Polish), PT (Portuguese), RO (Romanian), SK (Slovak), SL (Slovenian), SV (Swedish).

3Officials from the Commission or other Institutions are invited to use the standard channels (Sysper or inter-institutional vacancy portal).

9

IAS/COM/2026/001

Salary at this grade

Basic monthly salary at AD5 runs from €6,153 (step 1) to €6,961 (top step), giving an annual range of roughly €73,836 to €83,532 before tax and allowances. Steps increase automatically every two years; the figures here are taken from the salary grid in the EU Staff Regulations.

Eligible staff posted away from their country of nationality also receive an expatriation allowance worth 16% of basic salary (around €984 per month at step 1 of AD5) together with household, dependent-child, and education allowances where applicable. Take-home pay is then adjusted by the country correction coefficient for Brussels. For a worked example see our correction coefficients guide and the EU salaries overview.

Application timeline

This vacancy was first listed on 10 September 2026, 6 days ago.

The application deadline is 30 September 2026, 12 days from today. Late applications are not accepted, so submit through the official EU Careers portal well in advance.

Last verified against the EU Careers feed on 16 September 2026.

Where to learn more

For full responsibilities, requirements, and career progression at AD5 see our AD5 grade page; for headcount, mission, and other open vacancies at European Commission see the European Commission institution page; for the cost of living, correction coefficient, and other postings in Brussels see our Brussels location page; for related vacancies in the Audit field browse our Audit domain page.

New to EU careers? Our beginner's guide walks through entry routes, EPSO competitions, and what to prepare. For application logistics see application tips and EPSO competitions.