IT Auditor (m/f)

Beschreibung

• Perform Information Security Control assessments for several Third Parties against the minimum defined control standards as per the Information Security requirements framework
• Document, rate and communicate gaps identified due to the Information Security assessments to internal and external stakeholders
• Define mitigation actions for the correct remediation of information security risks
• Provide Third Party with Information Security feedback in regards to confidentiality, integrity and availability of their business processes and information systems
• Comprehensive reporting on the status of the reviews and identified risks

• Experience in planning and performing high complexity audits and/or Information Security Reviews
• Experience in Information Security Risk Management
• Excellent Knowledge of IS critical areas (e.g., enterprise security architecture, encryption, data privacy/management/quality, network and application security, etc.) and working knowledge of relevant assessment frameworks and/or standards e.g. ISO/27000 Series
• Relevant certifications as e.g. CISSP, CISA, ISO 27000 Lead Auditor would be a plus
• Proven ability to express in a very clear and concise way verbally and in writing
• Analytical and structured working style
• Ability to relay and summarize complex topics in Information Security in an comprehensive and understandable way
• Fluent in English and German would be nice
• Strong communication, interview and presentation skills