Technology Audit - Senior Associate - Istanbul

We’re looking for a talented technology auditor to join JPMorganChase Internal Audit in Europe, the Middle East and Africa and help strengthen governance and operational excellence. Internal Audit is an independent function that enhances and protects the firm by providing risk-based, objective assurance, advice, and insight. Our global team includes more than 1,200 professionals across more than 20 countries, working together to deliver impact at scale. We are proud of a diverse and inclusive workplace where your perspective is valued, and where success is measured by contribution and outcomes—not tenure. If you are motivated by continuous learning, stretch opportunities, and career growth, you’ll find strong support and room to grow here.

As a Technology Internal Auditor (Senior Associate) at JPMorganChase within the Regional Technology Audit team, you will be based in Istanbul and work closely with local and regional audit colleagues. You will lead and execute audits that evaluate technology control environments across Türkiye and the wider Europe, the Middle East and Africa region, and you will partner with stakeholders to help strengthen the control framework. You will use audit technology, data analytics, and sound judgment to assess and improve the effectiveness of governance, risk management, and controls, with exposure to senior leaders both inside and outside Internal Audit. You will also operate confidently within applicable Turkish regulatory expectations affecting technology and internal audit coverage, including requirements associated with the Banking Regulation and Supervision Agency, and support local audit and regulatory coordination in partnership with the Branch Head of Internal Audit and the Regional Technology Audit Director.

Job Responsibilities

In addition to the core end-to-end audit execution responsibilities, this role includes Senior Associate expectations such as increased independence, advanced testing, leading of audits, and coaching of junior team members.

• Support the end-to-end execution of audits providing guidance to less experienced auditors, including risk assessment, testing, control evaluation, workpaper documentation, report drafting, and issue closure verification.

• Independently develop and execute testing on assignments (audits/continuous monitoring/continuous auditing) with increasing complexity; package observations of gaps/control breaks/issues and provide recommendations for AIC consideration.

• Perform Auditor-in-Charge (AIC) activities through the audit life cycle (e.g., develop tests, scope/test design, peer review workpapers).

• Apply data analytics and AI-enabled audit tools to enhance audit execution and identify areas of risk, including advanced approaches (e.g., full population testing, Alteryx, advanced Excel) where appropriate.

• Support the annual audit plan and risk assessment processes for Turkey coverage to ensure audit coverage meets JPMorganChase Internal Audit methodology and applicable Turkish regulatory requirements.

• Support monitoring open IT-related material audit issues and remediation status within the agreed timeline; escalate where necessary to provide assurance that recommendations are acted upon.

• Support executing an effective program of continuous monitoring activities, including analysis of key metrics to identify control issues and adverse trends, and keeping abreast of key initiatives and pertinent industry and regulatory developments.

• Present the results of applicable audit work to Branch management and relevant risk and control governance forums; communicate observations and results clearly and concisely in both Turkish and English.

• Support coordinating Internal Audit responses to external requests from regulators and/or external auditors (as appropriate), including supporting the periodic reporting/submissions relating to Internal Audit activities required by Turkish regulations.

• Take initiative to proactively raise emerging risks, identify improvements to audit execution, and stay informed on regulatory, industry, and market developments impacting the firm’s risk profile and control environment both inside the country and beyond.

• Take ownership of self-development through stretch assignments and continuous learning (including completing sufficient annual training hours as required), while fostering a culture of integrity, respect, diversity, and innovation.

Required Qualifications, Capabilities, and Skills

• Bachelor’s degree in Technology, Computer Science, Information Systems, Accounting, Finance, or a related discipline.

• Internal audit experience in financial services, with significant exposure to technology or IT general controls auditing; minimum five years of experience in IT related internal/external audit and/or IT risk and controls.

• Practical understanding of internal control concepts and audit methodology, with the ability to evaluate control adequacy and effectiveness in a technology environment; demonstrated ability to independently execute testing and package issues/observations clearly.

• Strong awareness of core technology concepts such as cloud infrastructure, application controls, databases, networks, access management, and the software development lifecycle.

• Extensive knowledge of data analytics tools such as Excel, Alteryx, or similar; familiarity with automated and AI-enabled audit tools is a plus.

• Effective interpersonal and communication skills (verbal and written), with the ability to build credibility, work within a matrix organization, manage multiple priorities, and present audit outcomes to governance forums.

• Extensive knowledge of applicable Turkish regulatory requirements impacting Branch technology / information systems / electronic banking services expectations and the audit approach.

• Fluency in Turkish is essential, with strong English required for regional collaboration and reporting.

Preferred Qualifications, Capabilities, and Skills

Preferred qualifications that further strengthen coverage of modern technology risks and support progression toward greater AIC ownership include:

• A relevant professional certification such as CISA, CIA, AWS Certified Cloud Practitioner, or Google Cloud Digital Leader (or equivalent).

• Familiarity with coding or scripting (e.g., Python, SQL), cybersecurity controls, cloud platforms (AWS and/or GCP), or distributed technologies.

• Exposure to digital banking products, processes, or fintech environments.

• Strong analytical skills with the ability to assess the probability and impact of control weaknesses; ability to work under pressure in a dynamic environment.