Senior IT Auditor

Ferrovial; Madrid; Presencial; EUR 60.000 - 90.000; Jornada completa

Descripción de la vacante

Ferrovial Internal Audit in Madrid seeks a skilled professional to join the IT audit team. You will plan and execute cybersecurity audits across IAM, network and cloud security, and data protection controls, reporting to the Audit Manager and Head of IT Audit.

You will gather evidence, discuss findings with auditees, and adapt messages to different audiences while collaborating with global stakeholders. Fluent English and up to 30% travel are expected.

Formación

• Degree in CS or related technical field.
• 3–5 years of auditing experience or 3+ years in IT/IS audit.
• Knowledge of cybersecurity frameworks and data protection.

Responsabilidades

• Plan and execute internal audits and add-value action plans.
• Conduct technical cybersecurity audits across IAM, network, cloud (Azure, AWS, M365).
• Support data protection audits covering governance, DPIA, encryption, DLP.
• Gather evidence, document findings, and discuss recommendations.
• Communicate conclusions to auditees at various levels.

Conocimientos

Cybersecurity audits

Auditing experience

Data protection

English language

Educación

Degree in Computer Science or Telecommunications Engineering

Herramientas

IDEA

ACL

Power BI

Descripción del empleo

Join Ferrovial: Where Innovation Meets Opportunity

Are you ready to elevate your career with a global leader in infrastructure solving complex problems and generating a positive outcome on people’s lives? At Ferrovial, we are not just a company; we are a community of innovators and trailblazers. Ferrovial is also leading the development of the New Terminal One at JFK International Airport. Ferrovial shares trade under the ticker symbol FER on two stock markets: Nasdaq in the U.S. (Nasdaq100 Index) and the Spanish Stock Exchanges (IBEX 35). Ferrovial is included in globally recognized sustainability indices such as the Dow Jones Best-in-Class Index. We operate in more than 15 countries and have a workforce of over 22,000 professionals worldwide. Ferrovial’s activity is carried out through our business units, including Highways, Airports, Construction, and Energy.

Our Corporate organization oversees business activities, providing strategic planning, communication, legal, finance and human resources services to the business units. As a member of our corporate organization, you will have a broad view of our company, further supporting your career development.

Why Ferrovial?

• Global presence, local impact: Be part of a company that is shaping the future of infrastructure worldwide, with challenging roles and projects that make a real difference.
• Collaborative excellence: Work alongside talented professionals in a collaborative environment where your ideas and contributions are valued.
• Inclusive Culture:Thrive in an innovative and respectful workplace that values every voice, celebrates what makes us unique and turns differences into innovation.
• Career growth: Benefit from global and cross-business unit mobility, with development processes designed to ensure your professional growth.
• Compelling benefits and employee wellbeing: Enjoy a comprehensive benefits package that rewards your hard work and dedication and take advantage of initiatives designed to support your physical and psychological health.
• Productivity tools: Utilize cutting-edge tools like Microsoft Copilot to enhance your productivity and efficiency.

Job Description:

About The Role

The successful candidate will join Ferrovial Internal Audit, located in Madrid. He/she will enjoy a double reporting line to the Audit Manager and the Head of IT Audit located in Madrid.

Key Responsibilities

• Take part in the planning of internal audits and in their execution, contributing to the establishment of added value action plans.
• Plan and execute technical cybersecurity audits across key domains: IAM, network and cloud security (Azure, AWS, M365), endpoint protection, vulnerability management, SIEM/SOC and cyber resilience.
• Support data protection and privacy audits when required, covering governance, classification, retention, DPIA, data subject rights and technical controls (encryption, DLP).
• Gather and analyze evidence, document findings and discuss recommendations with auditees at the appropriate level.
• Communicate and discuss conclusions and recommendations with auditees, adapting the message to the audience and hierarchical level.

Qualifications

• Degree in Computer Science, Telecommunications Engineering or a related technical field.
• 4–5 years of experience in external audit or consulting, or at least 3 years in internal audit or an IT/Information Systems function.
• Knowledge of key cybersecurity frameworks and regulations, including NIST CSF 2.0, ISO 27001, CIS Controls, NIS2, ENS and GDPR.
• Hands‑on technical expertise across cybersecurity and data protection/privacy domains, including the areas outlined in the role responsibilities.
• Ability to assess gaps between best practices, regulatory requirements and internal policies, and translate them into practical control improvements.
• Strong analytical mindset and experience working with data and audit analytics tools such as IDEA, ACL or Power BI.
• Fluent business English, both written and spoken.
• Reliable, structured and self‑organised, with strong analytical judgement and decision‑making skills.
• Excellent communication and advisory skills, with the ability to adapt complex messages to different audiences and seniority levels.
• Flexible and collaborative approach, with the ability to adapt to changing priorities, scenarios and deadlines.
• Availability to travel up to 30% of the year.

Desirable / Highly Valued

• Professional certifications such as CISA, ISO 27001, ISO 22301 or cloud security certifications will be highly valued.
• Specialised training in cybersecurity, data protection or information systems governance will be considered a plus.
• Practical experience using Artificial Intelligence and Large Language Models — including tools such as Claude, Copilot, ChatGPT and Gemini — to enhance audit efficiency, automate routine tasks and support smarter, data‑driven decision‑making.
• Scripting and querying skills — Python, PowerShell, SQL or KQL — applied to audit testing, continuous auditing and automation of repetitive activities.
• Experience auditing in multinational environments, working across different geographies, stakeholders and regulatory frameworks.

Seize the challenge. Move the world together! Innovative, creative, respectful, and diverse are some of the ways we describe ourselves. We are motivated by challenges, and we collaborate across our business units to move the world together. Your journey to a fulfilling career starts here!

Ferrovial is an equal opportunity employer. We treat all jobs applications equally, regardless of gender, color, race, ethnicity, religion, national origin, age, disability, pregnancy, sexual orientation, gender identity and expression, covered veteran status or protected genetic information (each, a “Protected Class”), or any other protected class in accordance with applicable laws.

#WeAreFerrovial