Senior Cyber Security & Privacy Auditor

SITA; Barcelona; Híbrido; EUR 48.000 - 74.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Flex Week: Work from home up to 2 days

Flex Day

Flex-Location: up to 30 days abroad

Employee Wellbeing program

Professional development opportunities

Competitive benefits

Descripción de la vacante

At SITA, we perform cyber security, IT and privacy audits across the world to assess control design and operating effectiveness. The role involves independent fieldwork, data-driven techniques, and reporting to management on risk areas and remediation needs.

You'll work with senior stakeholders, apply standards like ISO 27001, NIST, CIS, COBIT, GDPR and NIS2, and contribute to the audit program with a focus on third-party risk and regulatory compliance. Hybrid work options are available.

Formación

• 3 years of experience in external/internal cyber, IT, and privacy auditing.
• Experience performing end-to-end audits independently.
• Strong understanding of cybersecurity and IT controls.
• Experience with technical audit techniques (not only policy reviews).
• Familiarity with frameworks such as ISO 27001, NIST, CIS, COBIT, GDPR, NIS2.
• Background in an audit environment (e.g. audit firm or internal audit team).
• Ability to communicate effectively with senior stakeholders, including leadership level.

Responsabilidades

• Perform independent cyber security, IT and Privacy audits in accordance with the audit schedule approved by the Audit and Risk Management Committee and hence prepare for independent cyber security, IT and Privacy audits and field work with the purpose of evaluating (but not limited to).
• Apply data-driven and technical audit techniques (configuration reviews, log analysis, vulnerability assessment review, etc.).
• Assess the design, implementation and operating effectiveness of cybersecurity, IT and Privacy controls.
• Evaluate alignment with recognized frameworks and standards (e.g. NIST CSF, ISO 27001, CIS, COBIT, NIS2, GDPR).
• Identify control gaps, weaknesses, and root causes.
• Assess management’s remediation plans for adequacy, sustainability, and timeliness.
• Assess compliance with Internal policies, Regulatory and contractual cyber requirements.
• Provide assurance over third-party and supply-chain cyber, IT and Privacy risk management.
• Present audit results to senior management and EMT.
• Track and validate remediation actions, including follow-up testing where required.

Conocimientos

Cybersecurity auditing

IT auditing

Privacy auditing

Stakeholder communication

Herramientas

ISO 27001

NIST

CIS

COBIT

GDPR

NIS2

Descripción del empleo

At SITA, we perform cyber security, IT and privacy audits across the world to assess control design and operating effectiveness. The role involves independent fieldwork, data-driven techniques, and reporting to management on risk areas and remediation needs.

You'll work with senior stakeholders, apply standards like ISO 27001, NIST, CIS, COBIT, GDPR and NIS2, and contribute to the audit program with a focus on third-party risk and regulatory compliance. Hybrid work options are available.