🕒 7 days ago
Apoia a governança de TI por meio do controle orçamentário e contratual, acompanhamento de indicadores e auditorias, manutenção de políticas e documentos e melhoria contínua dos processos.
Information Security Auditor
📅 Jan 15, 2025
Information Security AuditingIT Systems AuditingVulnerability AssessmentsSecurity Risk Management
📜 Description
- Conduct complex security audits of IT infrastructure, applications, technologies, and third parties.
- Assess security controls, processes, and policies; identify deficiencies and develop remediation strategies.
- Prepare audit reports detailing scope, test results, findings, and corrective actions.
- Identify information security risks and recommend practical, cost-effective mitigations.
- Monitor remediation progress and report security posture metrics to stakeholders.
- Support compliance audits with external auditors and internal stakeholders, ensuring applicable requirements are met.
🛠️ Requirements
- BSc/MSc in Information Security or any other related field
- Minimum 2 years working experience in an Information Security related field
- Experience in IT Systems and Security audit, vulnerability assessments and security risk management
- Demonstrated experience in auditing large scale infrastructures, information systems, IT processes and advanced security controls
- Good knowledge of information and security technologies such as Windows and Active Directory, Linux, virtualization, host and application security, networking, firewalls, security architecture etc
- Hands-on experience in auditing cloud infrastructures (AWS, Azure, GCP etc) will be considered an advantage
- Good understanding of security regulations and frameworks such as ISO 27001, NIST CSF and 800-53, GDPR, DORA etc
- Strong project and time management skills with the ability to work independently under minimal supervision and as part of a team
- Meticulous attention to detail with an analytical mind and outstanding problem-solving skills
- Excellent communication skills with the ability to explain technical concepts to a non-technical audience
✨ Benefits
- Attractive remuneration package plus performance related reward
- Private health insurance
- Corporate pension fund
- Intellectually stimulating work environment
- Continuous personal development and international training opportunities
Full job description
The Role:
We are looking for an experienced, passionate and self-motivated professional to join our fast-growing Information Security team. As part of our Information Security Audit Program, you will have the opportunity to assess and improve security controls across a dynamic and fast-paced environment. You will work with cutting-edge technologies and talented professionals, gaining hands-on experience in security assessments, compliance audits, and risk management.
The main responsibilities of the position include:
Main requirements:
Benefit from:
The Hiring Experience: What Awaits You
Similar jobs
Search more Compliance Specialist jobs
🕒 13 days ago
Support global cybersecurity governance by maintaining the ISMS, assessing security and third-party risks, embedding security-by-design in projects, and tracking compliance across business entities.
📍 🇵🇹 Portugal - Remote💼 Full-Time🥁 Junior🛡️ Compliance Specialist📢 🇬🇧 English Required📢 🇫🇷 French Required
Senior Analyst - Compliance, Global Capability Centre
🔥 18 hours ago
Ocorian👥 1001 - 5000 employees🏢 Financial Services
🔥 18 hours ago
Supports compliance, AML/CFT, and risk management across the UAE office and wider Group through risk assessments, compliance reviews, governance activities, and regulatory projects.
A&A Support Specialist
🕒 yesterday
Agecareers👥 51 - 200 employees🏢 Information Technology And Services
🕒 yesterday
Coordinate DoD cybersecurity assessment and authorization activities, serving as a liaison across customers, leadership, ISSMs, and SCA-Rs while managing service requests, schedules, documentation, and compliance tracking.
🕒 yesterday
Support the delivery of a multi-jurisdictional Compliance Monitoring Programme by conducting reviews, reporting findings, analysing risk information, and helping strengthen compliance practices across the business.