Cybersecurity Auditor

BDO LLP; Região Norte; Presencial; BRL 180 000 - 300 000; Tempo integral

Resumo da oferta

BDO LLP is seeking a Cybersecurity Auditor/Assistant Manager/Manager to support our Cybersecurity Consulting practice. You will assist Consultants in planning and executing IT audits, risk assessments, data privacy protection and GRC engagements for a growing client portfolio.

The role requires hands-on experience with ISO 27001, MAS TRM, SOC, NIST CSF and related controls, plus strong communication and project management skills to coordinate with clients and internal teams.

Qualificações

• Bachelor’s degree from an accredited university in IT, accounting, data analytics or a related field.
• Two to five (2-5) years of experience in information security, IT audit or a related field preferred.
• Focused experience with ISO 27001/MAS TRM/SOC/IM8/NIST preferred.
• Ideally, working knowledge and technical experience with Windows OS, Linux, AWS, GCP, Azure, and SQL Server.
• Understanding of TCP/IP, common networking ports and protocols, traffic flow, system administration, OSI model, defense-in-depth and common security elements.
• Familiarity with tools, such as GSuite, Trello, Slack, Discord.
• Excellent interpersonal, written and verbal communication skills.
• Exemplary time-management skills with the ability to juggle multiple projects and priorities.
• Self-starter with a solution-oriented mindset and the ability to thrive in a fast-paced environment, at times with well-defined goals, but limited formal procedures/structure.
• Must be a team player, passionate about the BDO mission, and have an innovative mindset.
• Working toward or already have certifications, such as CISA, CISSP, CISM, CRISC, CDPSE, CIPM, CIPT, CSX-F, PCI QSA, and others related to information security and audit

Responsabilidades

• Support Seniors and Consultants with onsite assessments, such as IM8+, MAS TRM, Cyber Hygiene notices/circulars, ISO 27001, Maturity Assessment, Data Privacy advisory, Social Engineering exercises and NIST CSF engagements
• Manage client relationships and expectations with effective communication
• Coordinate day-to-day operations with Seniors, Consultants and clients (i.e. schedule and lead meetings; create agendas; develop document request lists; document walkthrough narratives, control designs and tests of operating effectiveness)
• Assist Senior Consultants with the preparation and review of draft reports
• Assist with audit quality and assurance procedures
• Utilise base knowledge of information security systems, risks and controls
• Perform other administrative duties and assist with internal initiatives as assigned

Conhecimentos

Information security

IT audit

Data privacy

GRC

Communication

Time management

Team player

Problem solving

Formação académica

Bachelor's degree in IT, accounting, data analytics or related field

Ferramentas

GSuite

Trello

Slack

Discord

Windows OS

Linux

AWS

GCP

Azure

SQL Server

Descrição da oferta de emprego

Job Description

We are seeking a Cybersecurity Auditor/Assistant Manager/Manager to support our Cybersecurity Consulting practice. This position assists Consultants in planning and executing information technology audits, client risk assessments, data privacy protection and GRC Advisory engagements for our rapidly expanding client portfolio.

Responsibilities:

• Support Seniors and Consultants with onsite assessments, such as IM8+, MAS TRM, Cyber Hygiene notices/circulars, ISO 27001, Maturity Assessment, Data Privacy advisory, Social Engineering exercises and NIST CSF engagements
• Manage client relationships and expectations with effective communication
• Coordinate day-to-day operations with Seniors, Consultants and clients (i.e. schedule and lead meetings; create agendas; develop document request lists; document walkthrough narratives, control designs and tests of operating effectiveness)
• Assist Senior Consultants with the preparation and review of draft reports
• Assist with audit quality and assurance procedures
• Utilise base knowledge of information security systems, risks and controls
• Perform other administrative duties and assist with internal initiatives as assigned

Qualifications:

• Bachelor’s degree from an accredited university in IT, accounting, data analytics or a related field
• Two to five (2-5) years of experience in information security, IT audit or a related field preferred
• Focused experience with ISO 27001/MAS TRM/SOC/IM8/NIST preferred
• Ideally, working knowledge and technical experience with Windows OS, Linux, AWS, GCP, Azure, and SQL Server
• Understanding of TCP/IP, common networking ports and protocols, traffic flow, system administration, OSI model, defense-in-depth and common security elements
• Familiarity with tools, such as GSuite, Trello, Slack, Discord
• Excellent interpersonal, written and verbal communication skills
• Exemplary time-management skills with the ability to juggle multiple projects and priorities
• Self-starter with a solution-oriented mindset and the ability to thrive in a fast-paced environment, at times with well-defined goals, but limited formal procedures/structure
• Must be a team player, passionate about the BDO mission, and have an innovative mindset
• Working toward or already have certifications, such as CISA, CISSP, CISM, CRISC, CDPSE, CIPM, CIPT, CSX-F, PCI QSA, and others related to information security and audit