Head of Internal Audit Capability

VACANCY NOTICE – Head of Internal Audit Capability (AD9)

Ref. eu-LISA/26/TA/AD9/16.1

About the Agency

We are eu-LISA, the European Union Agency for the Operational Management of Large-Scale IT Systems in the Area of Freedom, Security and Justice. We help implement the European Union's policies by designing, developing, and operating large-scale information systems in internal security, border management, and judicial cooperation.

Our teams develop and manage the technological architecture of the Schengen area and the EU justice domain. By equipping law enforcement and border management operators and juridical practitioners with cutting-edge technological infrastructure, we help ensure security and justice for citizens.

With a workforce of more than 24 nationalities, eu-LISA embraces an international work environment and values collaboration among colleagues from diverse backgrounds. Join us to become part of our organisational culture that fosters inclusivity and diversity. Our belief is 'Together as one, we are making it happen'. We want our people to feel respected, valued and empowered.

Please visit our website and discover more about eu-LISA's core activities.

¹ Date of publication: 18/09/2026

About the function

The Internal Audit Capability Sector (IACS) strengthens eu-LISA's ability to create, protect and sustain value by providing the Executive Director, Deputy Executive Director, the Audit Compliance and Finance Committee as well as the Management Board with independent, risk-based and objective assurance, advice, insight and foresight. IACS supports the achievement of the Agency's strategic objectives by assessing and contributing to the continuous improvement of its governance, risk management and internal control processes.

In accordance with the Internal Audit Charter, IACS operates with organisational independence and professional objectivity and provides unbiased assessments and recommendations to enhance accountability, transparency, operational effectiveness and sound financial management.

The sector develops and delivers a risk-based audit programme and monitors the implementation of agreed recommendations. It also coordinates relations with external assurance providers, including the Internal Audit Service (IAS) and the European Court of Auditors (ECA), ensuring effective cooperation and follow-up of audit recommendations.

In addition, IACS promotes ethics, integrity and fraud prevention throughout the Agency, contributes to the implementation of the Anti-Fraud Strategy and serves as the Agency's contact point for the European Anti-Fraud Office (OLAF).

About the job

eu-LISA aims to establish a reserve list from which to source the best talent. You will report administratively to the Deputy Executive Director for day-to-day operations, while functional reporting will be to the Management Board. You will work closely with other internal assurance providers (e.g. Security Officer, Accounting Officer and Data Protection Officer), contributing to the strategic goal of further evolving the Agency towards an efficient, agile and resilient organisation within the EU regulatory framework.

Your tasks will include a wide range of responsibilities that extend beyond the following list:

• Lead and coordinate the activities of the Internal Audit Capability Sector², ensuring the effective delivery of audit and advisory engagements in accordance with professional standards;
• Develop and implement risk-based multiannual and annual audit plans, taking into account the Agency's strategic objectives, risk profile and management priorities;
• Conduct and supervise financial, compliance, performance and operational audits assessing the adequacy, effectiveness and efficiency of the Agency's governance, risk management and internal control processes, including IT controls and key projects;

² Subject to formal assignment of the staff member to the role of a Head of Sector by the Appointing Authority

• Identify emerging risks and opportunities for improvement and provide strategic insight to support the achievement of the Agency's objectives;
• Provide independent assurance, advice and recommendations to the Deputy Executive Director and Management Board on governance, risk management, internal controls, ethics and anti-fraud matters;
• Report significant audit findings, risk exposures and recommendations, while monitoring and reporting on the implementation of agreed corrective actions;
• Coordinate audits and maintain effective cooperation with the Internal Audit Service (IAS), the European Court of Auditors (ECA), OLAF and other relevant assurance providers;
• Act as the Agency's principal contact point for external audit activities and ensure effective coordination of audit-related matters across the organisation;
• Manage the resources of the Internal Audit Capability Sector and ensure compliance with applicable professional standards and quality assurance requirements.

Eligibility criteria

To be eligible for recruitment and selection, you need to meet the following formal criteria, which need to be fulfilled by the deadline for application:

General conditions

1. You are national of one of the EU Member States or Norway, Iceland, Liechtenstein, or Switzerland³ and you enjoy full rights as a citizen⁴.
2. You produce the appropriate character requirements for the duties involved.
3. You are physically fit to perform your duties⁵.
4. You have fulfilled any obligations imposed on you by the laws concerning military service.

Education

1. You have a level of education which corresponds to completed university studies attested by a diploma when the normal period of university education is four years or more, or

³ Appointment of a candidate from countries associated with the implementation, application and development of the Schengen acquis and with Dublin- and Eurodac-related measures is subject to the conclusion of the arrangements defined in article 42 of the eu-LISA regulation.

⁴ Prior to an appointment, the successful candidate will be asked to provide a certificate of absence of any criminal record issued by the competent authority.

⁵ Prior to an appointment, the successful candidate shall be medically examined by a selected medical service in order that the Agency may be satisfied that they fulfil the requirement of Article 82 (3)d of the Conditions of employment of other servants of the European Communities.

You have a level of education which corresponds to completed university studies attested by a diploma when the normal period of university education is least three years or more and appropriate professional experience of at least one year.

Only qualifications awarded in an EU Member State or that are subject to an equivalence certificate issued by an authority in a said EU Member State shall be taken into consideration.

Professional experience

1. You have at least twelve (12) years of proven full-time professional experience relevant to the duties after the award of the qualification certifying the completion of studies required as a condition of eligibility as above.

Language

1. You have a thorough knowledge (C1 level) of one of the 24 EU official languages and a satisfactory knowledge (B2 level) of another EU official language for the performance of your duties.

Selection criteria

eu-LISA aims to establish a reserve list from which to source the best talent. The suitability of candidates will be assessed during different stages of the selection procedure against the following criteria:

Experience

1. Solid experience similar to those duties outlined in the paragraph “About the job”. The Selection Committee will assess the range of fields covered, the length, the type and level of work done, and its relevance to the areas listed in section “About the job”;
2. Professional qualification(s) in auditing, demonstrated by internationally recognised certifications (e.g. CIA, CISA, CGAP or equivalent).

Soft Skills

1. Ability to lead, motivate and coordinate the work of a team, fostering collaboration, accountability and continuous improvement;
2. Ability to think strategically, anticipate emerging risks and opportunities, and provide forward-looking, risk-based advice to support organisational objectives and decision-making;

3. Ability to act with the highest standards of integrity, independence, objectivity and confidentiality while promoting a strong ethical culture within the Agency;

4. Excellent stakeholder management, negotiation and influencing skills with the ability to build effective working relationships while maintaining professional independence;

5. Outstanding ability to interface senior management and to report at governance level;

6. Ability to analyse complex organisational, operational, financial and information technology risks and develop risk-based and pragmatic recommendations.

Language

1. Strong drafting and communication skills in English, both orally and in writing, at least at the C1⁶ level.

Advantageous

1. Professional experience at an International Organisation or EU Institution or body;
2. Experience with IT and/or cybersecurity audit.

⁶ Cf. Language levels of the Common European Framework of reference: http://europass.cedefop.europa.eu/en/resources/european-language-levels-cefr

What we offer

Competitive salary package composed of a basic salary and various allowances:

• eu-LISA offers a competitive salary package. To begin with, the salary is determined by the grade for which you have applied. In addition, your future salary is based on the total number of years of professional experience and adjusted to the cost of living in your place of employment.
• Depending on your individual and family situation, you may be eligible for various allowances such as expatriation, installation and household allowance, dependent child, or education allowance, ensuring your financial comfort. It is important to note that salaries are exempt from national taxation, as they are subject to a tax raised by the EU.

Additional benefits: Your health and safety are our priority. We offer a wide range of additional benefits such as health insurance, including sickness and accident insurance, hospitalisation, dental care, and preventive medicine coverage. If you desire, your family members can be covered as well. In addition, we provide a generous EU pension scheme (defined benefit plan) that becomes available after completing 10 years of service within EU Institutions/Agencies or upon reaching the pensionable age from the EU pension scheme, to which both the Agency and you make monthly contributions.

Mental Health and Well-being Programme: Our comprehensive programme prioritises a healthy work-life balance, including amongst other reimbursements for health and fitness activities. Staff can also benefit from on-site gym facilities in both Strasbourg and Tallinn, as well as sauna facilities available in the Tallinn office.

Training and Development Opportunities: We invest in your professional development and personal growth. You will have access to a wide range of training programmes and learning resources.

Flexible Work Arrangements: While you will be required to relocate permanently to the place of employment or its surrounding areas, you can enjoy a healthy balance between teleworking from this place and office presence within our hybrid working arrangements. Additionally, you can telework from outside of your place of employment for up to 10 days per year.

Generous Holiday Package: You will receive at least 24 days of annual leave per calendar year, additional leave days may be granted for age and grade, and home leave to travel to your home country, if applicable. Some special leave can be granted for certain circumstances such as marriage, childbirth, and more. On top, you will benefit from an average of 18 eu-LISA holidays, including the Agency's end of the year closure.

Education for children: We offer access to an accredited European School in all our three sites, ensuring educational opportunities for your children.

Application process and next steps

Ready to join us in building a safer Europe? Apply now!

Before submitting your application, you should carefully check whether you meet all eligibility requirements.

Please submit your application via the e-recruitment platform here. eu-LISA does not accept applications submitted by any other means (e.g., e-mail or post), or any spontaneous applications.

It is in your interest to ensure that your application is accurate, thorough, and truthful. Your application should contain personal details, educational background, professional experience, language proficiency, motivation letter, and responses to pre-screening questions, if applicable. Candidates are requested to support their application with adequate, concise examples of their work experience and qualification, especially if not directly addressed in the duties listed in the application under professional experience.

Please note that if at any stage of the selection procedure it is established that any of the requested information provided by a candidate is false, they will be disqualified. If a candidate reaches the reserve list stage, they will be requested to supply documentary evidence in support of the statements that they made for this application.

If you encounter any difficulties during the application process or have any further questions, please do not hesitate to reach out to the Talent Acquisition Service. Feel free to send an email to eulisa-RECRUITMENT@eulisa.europa.eu.

Equal Opportunities Employer

As an equal opportunity employer, we are committed to recruit and value individuals with diverse backgrounds and experiences, and to foster an inclusive working environment, where everyone can be themselves. We encourage all suitably qualified and eligible candidates to apply regardless of their gender identity/expression, age, racial, ethnic and cultural background, religion and beliefs, sexual orientation, disability or neurodiversity.

Candidates requiring reasonable accommodation during any stage of the selection procedure (e.g. written tests or interviews) are invited to inform the Agency in advance. Supporting documentation may be requested where appropriate. We will make every reasonable effort to provide the necessary accommodations and to ensure your full and equal participation in the selection process.

Join our diverse team, where you will have the opportunity to grow both professionally and personally while enjoying the journey.

Selection procedure

The selection procedure includes the following steps:

• A Selection Committee, designated by the Appointing Authority, is established for the selection procedure.
• Each application is checked to verify whether the candidate meets the eligibility criteria.
• All eligible applications are evaluated by the Selection Committee based on a combination of certain selection criteria defined in the Vacancy Notice. Certain selection criteria may be assessed jointly and some criteria may be assessed in two or more stages of the selection procedure.
• The quality of the information provided by the candidate in their application is of utmost importance. Candidates are requested to support their application with adequate, concise examples of their work experience, and qualification, especially if not directly addressed in the duties listed in the application under professional experience.
• Once the list of the most qualified candidates is determined, a preliminary assessment may take place (e.g., a remote written test)⁷ prior to the shortlist phase.
• The most qualified candidates will be invited to the shortlist phase⁸ in which the Selection Committee scores the candidates in accordance with the selection criteria. Certain selection criteria may be assessed jointly and some criteria may be assessed in two or more stages of the selection procedure.
• The shortlist phase consists of a shortlist interview, which may be complemented by a written test. Candidates may also be required to prepare a presentation on a topic to be presented during the shortlist phase, which would be evaluated as part of the shortlist interview.
• Following the shortlist interviews and written tests (including a possible presentation), the Selection Committee draws up a non-ranked list of the most qualified candidates to be included in a reserve list for the post and proposes it to the Appointing Authority.
• In order to be included in the reserve list, candidates must receive at least 70% of the maximum scores in the shortlist phase.
• After the shortlist phase, the Selection Committee establishes a non-ranked list of the most qualified candidates to be included in a reserve list and proposes it to the Executive Director.
• The Executive Director might request and perform an additional interview with these candidates and submits a final list of candidates to the Management Board with a recommendation.
• The Executive Director engages the Head of Internal Audit Capability, subject to the Management Board's approval. Before granting such approval, the Management Board may interview the proposed candidates.

⁷ The Selection Committee has the discretion to choose between remote and on-site interviews/tests as deemed appropriate.

⁸ Same applies as per previous footnote.

• All shortlisted candidates will be informed whether or not they have been included in the reserve list. Candidates should note that inclusion in a reserve list does not guarantee engagement.

Please note that the Selection Committee’s work and deliberations are strictly confidential. Any contact with its members linked to this selection procedure is strictly prohibited.

English is eu-LISA’s working language. Any communication related to the selection procedure will be fully conducted in English.

Engagement and conditions of employment

The selected candidate will be engaged by the Authority Authorised to Conclude Contracts of employment from the established reserve list. Once the candidate receives an engagement offer, they may be required to accept the offer within a short timeframe and be available to start the contract at short notice.

The successful candidate will be engaged as Temporary Staff, pursuant to Article 2(f) of the Conditions of Employment of Other Servants of the European Communities (CEOS). The Temporary Staff post will be placed in Function Group AD, Grade 9, in the first or second step, depending on the length of professional experience.

The remuneration of a staff member consists of a basic salary (currently EUR 10 082.77 for step 1, and EUR 10 506.46 for step 2⁹) weighed by the correction coefficient¹⁰ (95% for Tallinn, Estonia) and paid in EUR¹¹.

The initial duration of the contract is five (5) years, including a probationary period of nine (9) months, with the possibility of contract renewal for another period not exceeding five (5) years. Following a successful renewal, the second renewal will be indefinite.

The reserve list shall be used for the recruitment and selection for the post in question and/or similar posts depending on the needs of the Agency. The candidates included in this reserve list may offered an employment contract of a shorter duration and/or in a different location (Strasbourg, Tallinn or Brussels) than the one stated in the vacancy notice in accordance with the business needs and subject to agreement with the candidate. In this case, the Agency will contact the candidate in the reserve list and ask for their interest.

All selected candidates may be required to have, or be in a position to obtain, a valid Personnel Security Clearance Certificate, SECRET UE/EU SECRET, depending on the specific job profile and the need-to-know requirements.

A Personnel Security Clearance Certificate (PSCC) is defined as a certificate issued by a competent authority establishing that an individual is security cleared and holds a valid national or EU PSCC, which shows the level of EU Classified Information (EUCI) to which that individual may be granted access, the date of validity of the relevant PSC and the date of expiry of the certificate itself.

Candidates who hold a valid security clearance and for whom it is required must provide a copy of their security clearance and specify the issuing authority, level and date of expiry. In case the validity of their security clearance expires within six months, the renewal procedure will be initiated expeditiously.

Kindly note that the necessary procedure for obtaining a PSCC can be initiated by request of the employer only, and not by the individual candidate.

⁹ Working conditions of temporary staff in CEOS

¹⁰ The correction coefficient is subject to a regular update.

¹¹ For the purposes of determining professional experience, the Appointing Authority shall allow 24 months' additional seniority of step in grade for professional experience equal to or more than the 3 years of professional experience after the degree giving access to the grade.

Failure to obtain the required security clearance certificate from the candidate's National Security Authority, either during or after the expiration of the probationary period, will give eu-LISA the right to terminate any applicable employment contract where the security clearance is a requirement.

Independence and declaration of interest

The selected candidate for the post will be required to sign a declaration of commitment to act in eu-LISA's best interest and in relation to interests that might be considered prejudicial to their independence.

Protection of personal data

eu-LISA ensures that candidates' personal data is processed in accordance with Regulation (EU) No 2018/1725 of the European Parliament and of the Council of 23 October 2018 on the protection of natural persons with regard to the processing of personal data by the Union institutions, bodies, offices and agencies and on the free movement of such data¹².

The legal basis for the selection procedure of Temporary Staff (TA 2(f)) are defined in the Conditions of Employment of Other Servants of the European Communities¹³.

The purpose of processing personal data is to enable selection procedures.

The selection procedure is conducted under the responsibility of eu-LISA's Human Resources Unit ('HRU'). The controller, in practice, for personal data protection purposes is the Head of the Human Resources Unit.

The information provided by the candidates will be accessible for a limited number of authorised HRU personnel, to the Selection Committee, and, if necessary, to the Executive Director, Security and/or the Legal personnel of eu-LISA.

Almost all fields in the Application Form are mandatory; the answers provided by the candidates in the fields marked as optional will not be taken into account to assess their merits.

Processing begins on the date of receipt of the application. eu-LISA's data storage policy is as follows:

• for applications received but not selected: the paper dossiers are filed and stored in archives for two (2) years after which time they are destroyed;
• for candidates included in a reserve list but not recruited: data is kept for the period of validity of the reserve list + one (1) year after which time it is destroyed;

¹² Regulation (EU) No 2018/1725 of the European Parliament and of the Council of 23 October 2018, OJ L 295, 21.11.2018, p. 39.

¹³ CEOS, in particular the provisions governing conditions of engagement in Title II.

— for recruited candidates: data is kept for a period of ten (10) years as of the termination of employment or as of the last pension payment after which time it is destroyed.

All candidates may exercise their right of access to and rectification or erasure of their personal data or restriction of processing.

In the case of identification data, candidates can rectify the data at any time during the procedure. In the case of data related to the admissibility criteria, the right of rectification cannot be exercised after the closing date of applications.

Any substantiated query concerning the processing of the candidate's personal data should be addressed to the eu-LISA's HRU (eulisa-RECRUITMENT@eulisa.europa.eu).

Candidates may have recourse at any time to eu-LISA's Data Protection Officer (dpo@eulisa.europa.eu) and/or the European Data Protection Supervisor (edps@edps.europa.eu).

Appeal procedure

If a candidate considers that they have been adversely affected by a particular decision, they can lodge a complaint under Article 90(2) of the Staff Regulations of Officials of the European Union and Conditions of employment of other servants of the European Union, to the following address:

eu-LISA
(European Union Agency for the Operational Management of Large-Scale IT Systems in the Area of Freedom, Security and Justice)
Vesilennuki 5
10415 Tallinn, Estonia

The complaint must be lodged within three (3) months. The time limit for initiating this type of procedure starts from the time the candidate is notified of the act adversely affecting them.