Senior Auditor IT Compliance (m/f/d)

Simon‑Kucher; München; Hybrid; EUR 70.000 - 90.000; Vollzeit

Benefits dieser Stelle

Hybrid work model

Remote teaming

Zusammenfassung

Simon-Kucher is seeking an IT Security, Compliance, Audit & Revision (SCAR) professional to join our global IT organization. The role focuses on audit planning, execution, and reporting across ISO 27001:2022, TISAX, and related standards, with occasional travel.

You will work with cross-functional stakeholders, lead auditees through the process, and contribute to the risk register while communicating in German and English.

Qualifikationen

• University degree or equivalent in informatics, IT security or related field.
• 4–5 years of audit experience in international environments.
• Experience auditing ISO 27001, SOC 2, TISAX or similar.
• Auditing skills including planning, scope definition, and reporting.
• Strong German and English communication, both written and spoken.

Aufgaben

• Plan audits by analysing information security standards and audit scope.
• Perform audits of internal processes, external providers, and IT systems.
• Conduct on-site or virtual physical security audits as needed.
• Document findings and contribute to risk registers and mitigation plans.
• Report to IT Compliance leadership and collaborate with stakeholders.

Kenntnisse

Audit planning

Documentation

Stakeholder management

German language

English language

Ausbildung

University degree in informatics / IT security

Tools

ISO 27001

BSI Grundschutz

SOC 2 Type II

TISAX

Jobbeschreibung

In Germany- Berlin | Bonn | Cologne | Frankfurt/Main | Hamburg | Munich

This position is part of the IT Security, Compliance, Audit & Revision (SCAR) team, a governance function within Simon-Kucher’s global IT organization.

The team is currently growing towards a target size of 15 professionals and is led by a dedicated IT Security Manager and Director.

What Makes Us Special

• Become part of a unique entrepreneurial team. Think independently, use your initiative, and take some risks. Entrepreneurship is a powerful force that drives the growth not only of our firm but our clients and people.
• Unlock the power of opportunity. Advance your career in a thriving company that creates positive impact. We invest in your professional development every step of the way.
• Enjoy balance and flexible working. Be empowered to do your best work – whether it’s remotely or in the office. We offer flexible and hybrid working, remote teaming, sabbaticals, and paid time off.
• Prioritize your health and wellbeing. No matter where you live, we offer a competitive suite of health benefits to help keep you and your loved ones safe.
• Work in a values-driven culture. At Simon-Kucher, our vision is to become the world's leading growth specialist. Our values guide the way we do business and communicate our distinctiveness. They sum up what we stand for, influence our culture, and drive how and why we do things.

How You Will Create An Impact

• Audit Planning & Documentation: Plan audits by analyzing Information Security standards, including ISO 27001:2022 and TISAX, defining audit scope, maintaining relevant audit catalogues, and drafting audit plans within the assigned area of responsibility.
• IT, Security & Service Provider Audits: Perform audits in accordance with approved audit plans covering internal Simon-Kucher processes and assets, external service providers, IT systems, infrastructure, processes, and Information Security Management activities.
• Physical Security Audits: Conduct on-site or virtual audits of physical security controls, including occasional travel to Simon-Kucher offices worldwide.
• Audit Findings & Risk Management: Document and classify audit findings, enabling process owners, asset owners, and decision-makers to develop mitigation measures and implementation plans, while contributing to Simon-Kucher’s risk register and collaborating with IT Compliance colleagues and risk owners.
• Reporting & Stakeholder Collaboration: Report to the Director of the IT Compliance Group, contribute to audit reporting for the CTO, and collaborate with IT Compliance colleagues and relevant stakeholders throughout the audit process, including involvement in certification audits.

About You

• Education: University degree or formal education in informatics, business informatics, IT security, or a related field. Professional background: at least four to five years of experience in a similar role within an international organization and global corporate environment.
• Audit Qualifications: Relevant education, training, or professional development as an Auditor or Senior Auditor in Information Security, IT Security, or Cyber Security.
• Audit Standards Expertise: Practical experience auditing against ISO 2700x standards, BSI Grundschutz, SOC 2 Type II, TISAX or similar Information Security and Information Security Management frameworks.
• Audit Certifications: Certifications related to Information Security Auditing are considered a plus.
• Audit Planning & Execution: Experience in planning audits, defining audit scopes, selecting appropriate audit methodologies, leading auditees through the audit process, and estimating the effort required for audit preparation, execution, documentation, and reporting.
• Risk Management: Experience in risk management and familiarity with risk management terminology and methodologies.
• Communication & Stakeholder Management: Very good communication skills and the ability to guide stakeholders through the audit process in a clear and timely manner.
• Languages: Advanced proficiency in German and English (B1 level or higher).
• Organization & Self-Management: Strong initiative, self-starter mentality, analytical thinking, and solid organizational, time management, and result-driven working skills to operate effectively in a global environment.
• Professional Ethics: High ethical standards in auditing, including maintaining confidentiality, avoiding conflicts of interest, and conducting audits and reporting objectively and independently.

Would you like to learn more about us and our company culture? Click here to watch our recruitment video .

About Simon-Kucher

Simon Kucher is a global consultancy with more than 2,000 employees in 30+ countries. Our sole focus is on unlocking better growth that drives measurable revenue and profit for our clients. We achieve this by optimizing every lever of their commercial strategy – product, price, innovation, marketing, and sales – based on deep insights into what customers want and value. With nearly 40 years of experience in monetization topics of all kinds, we are regarded as the world's leading pricing and growth specialist. simon-kucher.com

We believe in building a culture that embraces diversity, equity, and inclusion, creating an environment in which our people feel valued, are able to be themselves and feel their contribution matters. If we get that right, remarkable things will happen; people will grow faster, innovate, feel valued, and create better outcomes for everyone – our people, our clients and, of course, our business.

Your Personal Contact

Christina Jaup-Schwilk

recruitment.germany(at)simon-kucher.com

Better growth starts here. With you.