Remote Security Control Assurance Specialist – ISO/NIST

Colt Technology Services; Amsterdam; Híbrido; EUR 70.000 - 100.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Flexible hours

Work from home option

Development opportunities

Global family leave

Employee assistance program

Inclusion networks

Descripción de la vacante

Colt Technology Services is seeking a detail-oriented security control assurance specialist to design, test, and validate security controls across the organization. The role focuses on regulatory compliance, risk mitigation, and continuous improvement.

You will collaborate with IT, security engineering, and business teams to ensure controls meet ISO 27001, NIST, SOC 2, and NIS2 requirements, while supporting audit activities and producing clear assurance reports for leadership.

Formación

• 3–6+ years in information security, IT audit, or GRC.
• Proven experience with security control testing and assurance activities.
• Strong knowledge of ISO 27001, NIST CSF/800-53, SOC 2, and CIS Controls.

Responsabilidades

• Plan and execute control assurance activities including testing and validation of security controls.
• Develop and maintain control testing methodologies, scripts, and procedures.
• Perform periodic and continuous control monitoring for ongoing effectiveness.
• Identify control gaps, deficiencies, and areas for improvement.
• Act as a point of contact for internal and external audits with evidence and walkthroughs.

Conocimientos

Information security

Audit & testing

GRC frameworks

Stakeholder management

Herramientas

ServiceNow GRC

Archer

OneTrust

Cloud controls (Azure/AWS/GCP)

Descripción del empleo

Colt Technology Services is seeking a detail-oriented security control assurance specialist to design, test, and validate security controls across the organization. The role focuses on regulatory compliance, risk mitigation, and continuous improvement.

You will collaborate with IT, security engineering, and business teams to ensure controls meet ISO 27001, NIST, SOC 2, and NIS2 requirements, while supporting audit activities and producing clear assurance reports for leadership.