Security Auditor – Junior

InnoIT Consulting; Madrid; Presencial; EUR 30.000 - 42.000; Jornada completa

Descripción de la vacante

InnoIT Consulting is seeking a Junior IT Security Auditor to join our cybersecurity team in Madrid. The role focuses on performing security assessments and audits of information systems, identifying vulnerabilities, and recommending technical and organizational measures to strengthen security.

You will contribute to ensuring compliance with standards and regulatory requirements, participate in risk analysis, and help improve audit methodologies and tools used for security assessments.

Formación

• Degree in Computer Science, Cybersecurity, Information Systems, or a related field.
• Foundational knowledge of IT security concepts and risk management.
• Familiarity with security controls, standards, and audit processes.

Responsabilidades

• Perform IT security audits and assessments.
• Participate in vulnerability assessments, pen tests, and architecture reviews.
• Identify security risks, vulnerabilities and non-conformities.
• Assess implementation of security procedures and controls.
• Follow up on risks and remediation actions.
• Review organizational and technical security controls.
• Verify compliance with security standards and regulations.
• Prepare audit reports describing findings and risks.
• Provide technical and organizational recommendations to mitigate risks.
• Communicate audit findings to stakeholders.

Conocimientos

IT Security

Risk Management

GRC

Vulnerability Management

Security Auditing

Documentation

Educación

Bachelor's degree in Computer Science / Cybersecurity / Information Systems

Descripción del empleo

We are looking for a Junior IT Security Auditor to join our cybersecurity team.

The main mission of the role will be to perform security assessments and audits of information systems, identify vulnerabilities and non-conformities, and recommend appropriate technical and organizational measures to strengthen security.

The IT Security Auditor will contribute to ensuring technical, operational, regulatory, and legal compliance across information systems.

Key Responsibilities

Security Audits & Risk Analysis

• Perform and support IT security audits and assessments.
• Participate in local security inspections, including vulnerability assessments, penetration tests, and architecture reviews.
• Identify security risks, vulnerabilities, and non-conformities.
• Assess the correct implementation of security procedures and controls.
• Follow up on identified risks and remediation actions.

Security & Compliance

• Review organizational and technical security controls.
• Assess Disaster Recovery Plans (DRP), Business Continuity measures, and DLP (Data Loss Prevention) controls.
• Verify compliance with applicable security standards, policies, and regulatory requirements.
• Monitor the implementation of audit recommendations and corrective actions.
• Prepare security audit reports describing identified vulnerabilities, risks, and non-conformities.
• Provide technical and organizational recommendations to mitigate identified risks.
• Prepare technical documentation and security guidance on Information Systems Security topics.
• Communicate audit findings clearly to relevant technical and business stakeholders.

Security Monitoring & Continuous Improvement

• Maintain an active technology and cybersecurity watch on relevant threats, vulnerabilities, regulations, and security practices.
• Contribute to the continuous improvement of security audit methodologies and processes.
• Support the development or improvement of tools used for security assessments and audits.

Profile

• Degree in Computer Science, Cybersecurity, Telecommunications, Information Systems, or a related field.
• Initial professional experience or strong academic background in IT Security, Cybersecurity Audit, IT Risk, or GRC.
• Understanding of information security principles and risk management.
• Knowledge of areas such as:
• IT Security Auditing
• Vulnerability Management
• DLP
• Business Continuity / Disaster Recovery
• Security Compliance
• Security architecture
• Familiarity with security standards and frameworks such as ISO 27001, NIST, CIS Controls, or similar is valued.
• Basic knowledge of vulnerability assessment and penetration-testing concepts.
• Strong analytical and documentation skills.
• Ability to communicate security findings clearly and provide practical recommendations.

Seniority

• IT Security Audit Reports
• Vulnerability and Risk Assessments
• Technical and Organizational Recommendations
• Non-Conformity Follow-up Reports
• Security Technical Documentation

Performance Indicators

• Number of security audits performed.
• Implementation rate of audit recommendations.
• Follow-up and resolution of identified non-conformities