IT Auditor (Internal Audits and Assessments), Helsinki

Academic Work Finland Oy; Ylöjärvi; Hybride; EUR 56 000 - 85 000; Plein temps

Résumé du poste

Academic Work Finland Oy is seeking an IT auditor who will drive internal IT governance and cybersecurity assurance. The role executes audits, evaluates control design and effectiveness, and translates findings into risk insights.

You will lead yearly assurance rounds, train application owners on compliance, and drive remediation of control gaps. A strong technical background combined with business communication is essential, with a hybrid work model mainly in Finland.

Qualifications

• At least three years of IT audit experience.
• Good understanding of identity and access management, security monitoring and logging, security operations and incident response.
• Familiarity with ISO 27001 and the NIS2 Directive or other cybersecurity frameworks (CIS/NIST).
• Competence in audit planning and execution, control design and testing, evidence review, reporting.

Responsabilités

• Execute internal audit plans covering IT general and cybersecurity controls.
• Evaluate compliance with internal IT policies and the NIS2 Directive.
• Review evidence, identify control gaps, recommend remediation actions and verify closure of findings.
• Support management reporting, internal presentations and continuous improvement of the assurance and compliance process.
• Utilize ServiceNow to create data, manage reports, and track audit evidence.

Connaissances

IT audit

IT compliance

Information security governance

Identity and access management

Security monitoring

Incident response

Vulnerability management

Stakeholder management

Report writing

Presentation skills

Training

Fluent English

ServiceNow

Outils

ServiceNow

Description du poste

About the role

This role operates at the core of the organization’s IT governance and cybersecurity. The primary responsibility is to execute agreed internal IT and cybersecurity audits, evaluate the design and operating effectiveness of controls, and translate audit evidence into actionable risk insights. It is a highly collaborative and outcome-driven position where the auditor leads yearly assurance rounds, trains application and service owners on compliance processes, and drives identified control gaps to actual closure. Success in this position requires a strong blend of technical understanding and business communication.

You are offered a hybrid work model with at least 1 day per week at the office, providing a balance of autonomy and collaboration. This is a high-quality role with the potential for extension and internal career growth.

Work tasks

• Execute internal audit plans covering IT general and cybersecurity controls
• Evaluate compliance with internal IT policies and the NIS2 Directive
• Review evidence, identify control gaps, recommend remediation actions and verify closure of findings
• Support management reporting, internal presentations and continuous improvement of the assurance and compliance process
• Utilize ServiceNow to create data, manage reports, and track audit evidence

We are looking for

• At least three years of IT audit experience, together with experience in IT compliance and/or information security governance
• Good understanding of identity and access management, security monitoring and logging, security operations and incident response, and vulnerability and patch management
• Knowledge of ISO 27001 and the NIS2 Directive and/or other cybersecurity frameworks such as CIS or NIST
• Competence in audit planning and execution, control design and effectiveness testing, evidence review, documentation and reporting
• Strong stakeholder management, report writing and presentation skills, including the ability to translate technical findings into business risks
• Ability to challenge constructively and independently and to work with senior leadership and internal and external auditors
• Practical experience in training, documentation creation and influencing stakeholders
• Fluent English skills

It is meritorious if you have

• Advanced knowledge of ServiceNow GRC/IRM modules
• CISA or ISO 27001 Lead Auditor certification
• Experience with SOC 1, SOC 2, or ISAE 3402 assurance frameworks
• Familiarity with ITIL and IT service-management governance

Our recruitment process

This recruitment process is handled by Academic Work and it is our clients wish that all questions regarding the position is directed to Academic Work. Our client company will be revealed at the end of the recruitment process. Our client is a global, Nordic-headquartered enterprise leader operating in the sustainable materials and process industry, with operations across multiple continents.

Our selection process is continuous and the advert may close before the recruitment process is completed if we have moved forward to the next phase. The process includes two tests: one personality test and one cognitive test. The tests are tools to find the right talent for the right position, to enable equality, diversity, and a fair process.

• Employment relationship: Employment
• Wage: Other
• Number of positions: 1
• Source: Job Market Finland/Työmarkkinatori

Osaamisalue: Taloushallinto & kirjanpito