Compliance and Operational Risk Officer Compliance Audit IT Risk Management COBIT Lieferanten-Management CISA Internal Auditing Forensische Analyse ISO 27001 lead auditor