Information Security Auditor

About the role

We are looking for an experienced, passionate and self‑motivated professional to join our fast‑growing Information Security team. As part of our Information Security Audit Program you will assess and improve security controls across a dynamic environment, working with cutting‑edge technologies and talented colleagues.

Key responsibilities

• Perform hands‑on complex security audits of IT infrastructure, applications, technologies and third‑party services.
• Assess internal controls, processes and policies related to IT and security, identify deficiencies and develop remediation strategies.
• Prepare comprehensive audit reports summarising scope, findings and recommended corrective actions.
• Identify information security risks and provide practical, cost‑effective recommendations.
• Manage and monitor remediation progress and ensure compliance with applicable laws and regulations.
• Liaise with external auditors and internal stakeholders to execute compliance audits.

Required profile

• BSc/MSc in Information Security or a related field.
• Minimum 2 years of experience in information security, IT audit, vulnerability assessment or risk management.
• Demonstrated experience auditing large‑scale infrastructures, information systems and advanced security controls.
• Strong project and time‑management skills with ability to work independently and in a team.

Required skills

• Windows and Active Directory.
• Linux operating systems.
• Virtualisation, host and application security.
• Networking, firewalls and security architecture.
• Cloud platforms (AWS, Azure, GCP).
• Knowledge of security frameworks and regulations such as ISO 27001, NIST CSF, NIST 800‑53, GDPR and DORA.
• Experience with IT systems and security audit, vulnerability assessments and risk management.

What we offer

• Attractive remuneration package plus performance‑related reward.
• Private health insurance.
• Corporate pension fund.
• Intellectually stimulating work environment.
• Continuous personal development and international training opportunities.