Working Student - Assurance (m/f/d)

We are looking for a

Working Student - Assurance (m/f/d)

(limited, part-time) Join our team at our locations in Berlin, Münster, Verl, Amsterdam or Heerenveen – flexible working conditions available

We are looking for a Working Student to join our expanding CISO team in our regulated payment institute. This role supports the Assurance Team in conducting internal and external audits.

Your responsibilities:

• Support and participate in internal and external audits and assessments related to resilience topics (e.g. ISO 27001, PCI DSS, supplier and customer audits).
• Assist in organizing, preparing, and documenting audits, including evidence collection and follow-up actions.
• Contribute to Riverty’s audit defense activities for information security and business continuity.
• Support the assessment and documentation of IT General Controls and operational controls, under guidance of the team.
• Create structured audit documentation and reports, including observations and summaries for internal stakeholders.
• Collaborate closely with the team to improve audit and assurance processes and ways of working.
• Operate reliably and independently within assigned tasks in an international, multicultural environment.

Your profile:

• Basic understanding of IT General Controls and operational controls, or strong motivation to learn how these controls are designed and assessed in an audit context.
• Interest in information security, business continuity, risk management, or resilience topics.
• Basic understanding of audit and compliance frameworks (e.g. ISO 27001, PCI DSS), or strong willingness to work with these standards.
• Strong written and verbal communication skills in English, including the ability to explain findings and questions clearly; German is a strong plus.
• Strong analytical skills and a structured, reliable way of working.
• Ability to work independently while collaborating effectively within a team.
• Relevant certifications (e.g. CISA) and/or prior experience in assurance, audit, or compliance are considered a plus, but not required.