Senior IT Auditor — Cyber & Data Privacy

Ferrovial Construction; Madrid; On-site; EUR 70,000 - 95,000; Full time

Benefits offered by this job

Equal opportunity employer

Job summary

Ferrovial Internal Audit in Madrid seeks a cybersecurity-focused auditor to join the team and contribute to planning and executing audits across IAM, network and cloud security, and data protection controls.

The role requires 3–5 years in internal IT/audit or external audit, with hands-on skills in IDEA/ACL/Power BI and knowledge of NIST CSF 2.0, ISO 27001 and GDPR. Fluent English and travel up to 30% are expected.

Qualifications

• Formal degree in CS or related technical field.
• 3–5 years external audit or 3+ years internal IT/audit experience.
• Knowledge of NIST CSF 2.0, ISO 27001, CIS Controls, NIS2, GDPR.

Responsibilities

• Plan and execute IT audits and contribute to value-add action plans.
• Audit cybersecurity domains including IAM, network and cloud security (Azure, AWS, M365).
• Assess gaps between best practices, regulatory requirements and internal policies.
• Communicate findings to auditees at appropriate levels and tailor messaging.

Skills

Cybersecurity auditing

Internal audit experience

Analytical thinking

Communication skills

English proficiency

Education

Degree in Computer Science or Telecommunications Engineering

Relevant certifications (CISA ISO 27001 ISO 22301)

Tools

IDEA

ACL

Power BI

Python

PowerShell

SQL

KQL

Job description

Ferrovial Internal Audit in Madrid seeks a cybersecurity-focused auditor to join the team and contribute to planning and executing audits across IAM, network and cloud security, and data protection controls.

The role requires 3–5 years in internal IT/audit or external audit, with hands-on skills in IDEA/ACL/Power BI and knowledge of NIST CSF 2.0, ISO 27001 and GDPR. Fluent English and travel up to 30% are expected.