Auditor, IT Risk and Compliance

Jobtailor; Deutschland; Vor Ort; EUR 70.000 - 110.000; Vollzeit

Zusammenfassung

Jobtailor is seeking an experienced compliance professional to lead audits and risk management efforts. You will develop programs, conduct comprehensive audits aligned with ISO27001, PCI DSS, and SOC 2, and prepare detailed reports for senior management.

You will also create and update policies, oversee corrective actions, and liaise with stakeholders to ensure continuous improvement. Qualified candidates will have 3+ years in auditing, compliance or risk roles, strong knowledge of GRC tools,

Qualifikationen

• Bachelor’s degree in Information Systems or equivalent
• Certification/knowledge of ISO 27001:2022 and PCI‑DSS v4.0+
• Experience with threat and risk management methodologies
• Familiarity with Unified Compliance Frameworks and GRC tools
• Strong understanding of security trends and cyber threats
• 3+ years in auditing, compliance or risk roles
• Experience in highly regulated environments
• Eligible to work in Canada
• Fluent in English
• Ability to obtain Government of Canada Secret clearance
• Willingness to travel 2–6 weeks/year

Aufgaben

• Develop, deliver and manage compliance and risk programs and activities
• Conduct audits and perform comprehensive internal audits aligned with recognized frameworks (ISO/IEC 27001, ISO 14298, PCI DSS, SOC 2, CIS Controls)
• Prepare detailed reports on audit findings, update registers, and highlight areas of concern
• Present findings to senior management and compliance committees
• Ensure IT systems and procedures comply with ISO 27001, PCI, and SOC 2
• Create internal policies and procedures to meet evolving standards
• Participate in maintenance of risk management programs
• Identify and evaluate risks with stakeholders and SMEs
• Document identified risks and communicate to stakeholders
• Provide guidance to business and technology teams
• Oversee corrective actions to resolve compliance issues
• Continuously seek process improvements

Kenntnisse

ISO 27001

PCI DSS

SOC 2

GRC tools

Auditing

Risk management

Ausbildung

Bachelor’s degree in Information Systems

Tools

GRC tools

Jobbeschreibung

Responsibilities

• Develop, deliver and manage compliance and risk programs and activities
• Conduct audits and perform comprehensive internal audits aligned with recognized frameworks (ISO/IEC 27001, ISO 14298, PCI DSS, SOC 2, CIS Controls etc.)
• Prepare detailed reports on audit findings, update registers, and highlight areas of concern
• Present findings to senior management and compliance committees
• Ensure IT systems and procedures comply with industry standards and regulations such as ISO-27001, PCI, and SOC 2
• Create internal policies and procedures to meet emerging or evolving standards
• Participate in the maintenance of ongoing risk management program following CBN standard procedures
• Identify and evaluate risks collaborating with stakeholders and SMEs
• Document identified risks and communicate them to relevant stakeholders
• Provide subject‑matter guidance to business and technology teams
• Oversee the implementation of corrective actions to ensure compliance issues are resolved effectively
• Continuously seek ways to improve processes and methodologies

Requirements

• Bachelor’s degree in Information Systems (or similar) or equivalent combination of relevant education and additional relevant work experience
• Certification and/or demonstrable knowledge/experience in compliance frameworks including ISO 27001:2022 and PCI‑DSS v4.0+
• Working knowledge of industry recognized threat and risk management methodologies and frameworks
• Comprehensive knowledge of Unified Compliance Frameworks and GRC tools
• Thorough knowledge of current security trends, threat vectors and cyber security threats
• 3+ years of experience in a relevant auditing, compliance and/or risk role
• Experience in cybersecurity, corporate security, or highly regulated organization
• Experience in developing and delivering compliance and risk assessments, creating, and presenting reports to management and liaising with external auditors
• Legally eligible to work in Canada
• Fluent in English (speak, read, write)
• Able to obtain (in a timely manner) and maintain Government of Canada Secret (Level II) security clearance
• Able to travel 2-6 weeks/year

Core Competencies

Demonstrates expertise in compliance and risk management, with a strong focus on ISO 27001, PCI DSS, and SOC 2 frameworks. Proven ability to conduct audits, prepare detailed reports, and communicate findings effectively to senior management and stakeholders.