Are you looking for an opportunity in a fast-growing, global IT team where collaboration, innovation, and a stakeholder-centric approach are priority? As part of Simon-Kucher, our IT works globally as a trusted partner in the company’s journey toward success and navigates the ever-changing technological landscape. As Senior Auditor IT Compliance you play a crucial role in the planning and documentation as well as the execution and coordination of IT audit management and actively shape our employee’s work environment. Apply and support growth as a member of our global IT team!
responsibilities :
You plan audits by analyzing Information Security Standards, such as ISO 27001:2022, and define audit scopes within your area of expertise.
You create and maintain structured audit catalogues tailored to the identified scope.
You draft audit plans for your assigned audit areas.
You perform audits in line with the approved audit plan, covering both internal processes and assets as well as audits of external service providers.
You assess a broad range of audit topics, including IT systems, infrastructure and processes, information security management processes, and on-premise or virtual audits of physical security.
You document findings clearly and thoroughly to enable process and asset owners to identify and develop mitigation measures and implementation plans.
You contribute to the risk register through the clear classification and documentation of audit findings and collaborate with IT compliance and risk stakeholders.
You report audit results to the CTO.
You are involved in certification audits.
You support client assessments by providing information or take part in client meetings.
requirements-expected :
You are fluent in English on a business level (C1).
You are trained or have developed yourself into an Auditor or Senior Auditor for information security or IT/cybersecurity.
You have at least 4–5 years of experience in similar audit roles within international organizations.
You uphold the highest ethical standards in auditing, ensuring objectivity, confidentiality, and independence at every stage of the process.
You have hands-on experience with auditing of either ISO 2700x standards, BSI Grundschutz, SOC 2 Type II, or similar standards covering information security and information security management.
You are experienced in audit planning, including scope definition, method selection, guidance of the auditees through the audit process, and realistic estimation of time and efforts.
You are familiar with risk management terminology and methodologies.
You demonstrate strong analytical thinking, self-motivation, and a structured, results-oriented approach to your work.
You hold a university degree or formal education in informatics, business informatics, IT security, or a similar field.
offered :
Employment contract.
Private medical insurance in the highest package fully paid by the employer.
Multisport card fully financed by the employer.
Employee referral program.
Hybrid work model.
Remote work subsidy of €500 to start, then monthly bonus for utilities.
International SOS (ISOS).
Access to LinkedIn Learning & Headspace.
Employee Assistance Program (EAP).
Microsoft Workplace Discount Program.
Birthday book for the employee.
Internal Learning&Development Department with more than 5 000 different training courses.
