Third Party Risk Auditor

HN Services España; Madrid; Hybrid; EUR 55.000 - 90.000; Vollzeit

Benefits dieser Stelle

Career plan tailored to employee

Progression within the company

Flexible working hours

Zusammenfassung

HN Services España is seeking a Cybersecurity and IT Risk engineer to conduct third-party audits and risk assessments, lead stakeholder interviews, and review evidence to ensure security and regulatory compliance.

The role involves coordinating with customers and auditees, evaluating controls, preparing reports, and presenting findings. Hybrid work with flexible hours and potential on-site audits across clients.

Qualifikationen

• Proactive, autonomous and results-oriented professional.

Aufgaben

• Conduct and coordinate meetings with stakeholders from different entities (customers).
• Conduct and coordinate meetings with third-party stakeholders (auditees).
• Lead interviews with customers and third-party representatives as part of audit and assessment activities.
• Evaluate the cybersecurity and risk management maturity of third-party providers delivering services to the entities.
• Review and analyze supporting evidence provided by third parties to validate responses to security and risk control.
• Prepare audit reports, consolidate key risks and observations, and present findings and recommendations to customers and management.

Kenntnisse

Third-party audits

Stakeholder management

Analytical thinking

Audit reporting

Jobbeschreibung

We are an international technology services company founded in 1983 and currently have over 2,000 employees in 5 countries: France, Spain, Romania, Portugal, and Luxembourg.

What are we looking for?

We are seeking a Cybersecurity and IT Risk engineer, who conducts Third-Party Audits and risk assessments of external service providers, leading interviews with key stakeholders, reviewing supporting evidence, evaluating cybersecurity controls and operational controls, identifying key risks, and contributing to the effective management of third-party risk and regulatory compliance..

Main Responsibilities:

• Conduct and coordinate meetings with stakeholders from different entities (customers).
• Conduct and coordinate meetings with third-party stakeholders (auditees).
• Lead interviews with customers and third-party representatives as part of audit and assessment activities.
• Evaluate the cybersecurity and risk management maturity of third-party providers delivering services to the entities.
• Review and analyze supporting evidence provided by third parties to validate responses to security and risk control.
• Prepare audit reports, consolidate key risks and observations, and present findings and recommendations to customers and management.

Requirements:

• Proactive, autonomous, and results-oriented professional with a strong sense of ownership and accountability.
• Excellent communication and stakeholder management skills, capable of building effective relationships with internal and external parties at different organizational levels.
• Customer and service-oriented mindset, focused on delivering high-quality outcomes and ensuring stakeholder satisfaction.
• Strong analytical, critical-thinking, and problem-solving abilities, with the capacity to assess complex situations and develop practical, risk-based solutions.
• Well-organized and structured approach to work, with strong planning, prioritization, and coordination skills.
• Ability to adapt quickly to changing priorities and operate effectively in dynamic and multicultural environments.
• Collaborative team player with the ability to work independently when required.
• Continuous learning mindset, demonstrating curiosity and commitment to professional development.
• Data-driven approach, leveraging analysis and insights to assess risks, support audit activities, and evaluate control effectiveness.
• Comfortable managing multiple activities simultaneously while maintaining attention to detail and quality standards.
• Willingness to travel for on-site audit assignments as required.
• Knowledge of industry standards and frameworks such as ISO 27001 and ISO 27005.
• Professional certifications such as CISA, CISM, CRISC, ISO 27001 Lead Auditor, or equivalent (nice to have).

Working Model:

Hybrid.

Flexible hours from Monday to Friday.

We offer:

• Career plan tailored to employee preferences
• Progression within the company
• Flexible working hours