Cyber Security Analyst - Audit

CSC; Amsterdam; Hybrid; EUR 65,000 - 90,000; Full time

Job summary

CSC is seeking a Cyber Security Analyst – Audit to enhance the organization’s security posture across multiple jurisdictions. The role executes audit activities, strengthens compliance, and aligns security strategies across legacy and modern environments.

The ideal candidate has 4+ years in cybersecurity, IT audit, risk management, or compliance, with knowledge of SOX, GDPR, ISO, DORA, PCI, PSD2, and NIST. Global audits and regulators coordination are key aspects of this role.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, MIS, or related field.
• 4+ years of experience in IT audit, risk management, or cybersecurity.
• Strong knowledge of global regulatory frameworks (SOX, GDPR, ISO, DORA, PCI, PSD2, NIST).
• Familiarity with audit standards and frameworks (SOC 1 & 2, ISO 27001, NIST, COSO, COBIT).
• Understanding of cybersecurity threat landscape and control environments.
• Experience with cloud, DevOps, application security, and AI.

Responsibilities

• Partner with global teams to manage technology risk and regulatory compliance.
• Plan and execute internal, external, and jurisdictional audits in line with the audit roadmap.
• Develop and enhance security policies, standards, procedures, and compliance frameworks.
• Improve IT compliance processes and identify automation opportunities for control activities.
• Design and execute control testing strategies and ensure evidence documentation.
• Maintain and enhance control frameworks aligned with regulatory and industry standards.
• Conduct IT risk assessments and track remediation of identified gaps.
• Coordinate with auditors, regulators, and stakeholders during audit cycles.
• Track and report compliance metrics and program effectiveness indicators.
• Leverage GRC tools for audit management, evidence tracking, and reporting.
• Identify risks and vulnerabilities and recommend mitigation strategies.
• Manage third-party/vendor risk assessments and escalations.
• Respond to regulatory and jurisdictional audit requests.
• Provide actionable insights and reporting to security leadership.

Job description

Cyber Security Analyst – Audit

Location: Luxembourg OR Amsterdam, Netherlands

Working hours: Monday – Friday 8:00 am – 5:00 pm OR 9:00 am – 6:00 pm

Hybrid arrangement

We are seeking a Cybersecurity Analyst – Audit to support and enhance the organization’s security posture across multiple jurisdictions. This role is responsible for executing audit activities, strengthening compliance frameworks, and aligning security strategies across both legacy and modern technology environments. The candidate will work closely with audit partners and internal stakeholders to ensure adherence to audit and regulatory requirements and continuous improvement of security assurance practices.

Ideal candidate has at least four years of experience in cybersecurity, IT audit, risk management, or compliance. This role ensures adherence to global regulatory standards (e.g., SOX, GDPR, ISO), evaluates control effectiveness, and serves as a primary liaison for auditors. The role requires strong risk assessment capabilities, proactive issue resolution, and a balanced focus on compliance and enterprise resilience in tandem with security leadership.

Key Responsibilities

• Partner with global teams across business operations, compliance, IT, and legal to manage technology risk and regulatory compliance.
• Plan and execute internal, external, and jurisdictional audits in line with the audit roadmap.
• Develop and enhance security policies, standards, procedures, and compliance frameworks.
• Improve IT compliance processes and identify automation opportunities for control activities.
• Design and execute control testing strategies and ensure proper evidence documentation.
• Maintain and enhance control frameworks aligned with regulatory and industry standards.
• Conduct IT risk assessments and track remediation of identified gaps.
• Coordinate with auditors, regulators, and stakeholders during audit cycles.
• Track and report compliance metrics and program effectiveness indicators.
• Leverage GRC tools for audit management, evidence tracking, and reporting.
• Identify risks and vulnerabilities and recommend mitigation strategies.
• Manage third-party/vendor risk assessments and escalations.
• Respond to regulatory and jurisdictional audit requests.
• Provide actionable insights and reporting to security leadership.

Technical Skills, Experience and Qualifications

• Bachelor’s degree in Computer Science, Information Technology, MIS, or related field (or equivalent experience).
• 4+ years of experience in IT audit, risk management, or cybersecurity.
• Strong knowledge of Global regulatory frameworks such as SOX, GDPR, ISO, DORA PCI, PSD2 and NIST.
• Familiarity with audit standards and frameworks (SOC 1 & 2, ISO 27001, NIST, COSO, COBIT).
• Understanding of cybersecurity threat landscape and control environments.
• Knowledge of modern technologies including cloud, DevOps, application security, and AI.
• Experience working with/ customizing GRC tools (e.g., Archer, OneTrust, AuditBoard, Diligent).
• Strong analytical, communication, and problem-solving skills.
• Proactive approach towards available work requests and timely response.
• Ability to translate technical risks into business insights.
• Hands‑on experience in IT disciplines and audit execution.
• Experience in global and multi-regulatory environments.
• Ability to manage complex compliance requirements across jurisdictions.
• Strong organizational and proactive risk management skills.
• High integrity, accountability, and professional excellence.
• CISSP, CISM, CRISC, CISA, CIA, or other relevant cybersecurity, audit, or risk certifications.

Disclaimer: The information above describes the general nature and level of work performed by employees in this role. It is not intended to describe all duties, responsibilities, and qualifications.