Senior IT & InfoSec Audit Lead - Hybrid Madrid

Ebury; Madrid; Híbrido; EUR 100.000 - 140.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Competitive Starting Salary

Annual discretionary bonus

Dedicated Mentorship

Central Office

Generous Benefits Package

Descripción de la vacante

Ebury Madrid seeks a Senior Audit Manager - IT & Information Security, a technology risk expert responsible for evaluating and strengthening the internal control environment across cloud infrastructure, cyber security controls, third-party ecosystems, and engineering platforms used in the SDLC. This role requires deep technical expertise in cloud security and DevSecOps, plus regulatory awareness.

You will combine strong technical knowledge with regulatory insights to deliver risk-based audits,

Formación

• 5+ years in IT/Cyber Audit within cloud-native Fintech platforms, financial institutions, or Big 4 tech practice.
• Experience auditing cloud infrastructure, identity and access management, and security controls.
• Familiarity with regulatory regimes (DORA, FCA, PRA, ISO 27001, COBIT, NIST).

Responsabilidades

• Lead IT and cyber security assurance across cloud infrastructure and SDLC.
• Audits of third-party risk management and platform operations.
• Align audits with regulatory requirements including DORA, FCA PS21/3 and ISO 27001.
• Evaluate data governance, privacy, and data protection controls.
• Report audit findings to executive committees and drive remediation.

Conocimientos

IT/Cyber Audit

Cloud-native Fintech

DevSecOps

Regulatory Knowledge

Herramientas

Splunk

CrowdStrike

ReliaQuest

AuditBoard

Descripción del empleo

Ebury Madrid seeks a Senior Audit Manager - IT & Information Security, a technology risk expert responsible for evaluating and strengthening the internal control environment across cloud infrastructure, cyber security controls, third-party ecosystems, and engineering platforms used in the SDLC. This role requires deep technical expertise in cloud security and DevSecOps, plus regulatory awareness.

You will combine strong technical knowledge with regulatory insights to deliver risk-based audits,