Senior IT Auditor- Compliance (ID: 3061)

Stafide; Amsterdam; On-site; EUR 70,000 - 100,000; Full time

Job summary

Stafide is seeking a Senior IT Auditor- Compliance to lead end-to-end IT audits focusing on IT general controls, cybersecurity, and risk management within a modern cloud-based environment.

The role requires 5–8 years of IT auditing experience, with certifications like CISA or RE, and strong knowledge of databases, cloud platforms (Azure, GCP), Kubernetes, and ITIL/DevOps practices. Excellent English is expected.

Qualifications

• 5–8 years of IT auditing experience with strong ITGC exposure.
• IT audit certifications such as CISA or RE.
• Strong databases, cloud, and OS knowledge; z/OS and DB2 a plus.

Responsibilities

• Lead and conduct comprehensive IT audits focusing on ITGC, cybersecurity, and risk management.
• Assess effectiveness and compliance of IT environments including infrastructure, cloud, platforms, and databases.
• Evaluate adherence to ISO 27001/27002, COBIT (SOX), IT4IT, COSO.
• Review third-party assurance reports (ISAE, SSAE, SOC I/II).
• Provide actionable insights to enhance security, operations, and audit readiness.
• Collaborate with Agile/DevOps/ITIL-aligned teams to integrate audit processes.

Skills

ITGC

Cybersecurity

Risk Management

Databases

Cloud Platforms

Kubernetes

Operating Systems

ISO 27001/27002

COBIT for SOX

ITIL/DevOps

ISAE/SSAE/SOC

ServiceNow

Splunk

Office 365

GitHub

Terraform

CISA

RE

Tools

ServiceNow

Splunk

Office 365

GitHub

Terraform

Job description

Senior IT Auditor- Compliance (ID: 3061)

• Lead and conduct comprehensive IT audits with a focus on IT General Controls (ITGC), cybersecurity, and risk management.
• Assess the effectiveness and compliance of IT environments including infrastructure, cloud, platforms, and databases.
• Evaluate adherence to regulatory standards and best practices including ISO 27001/27002, COBIT (for SOX), IT4IT, and COSO.
• Review third-party assurance reports such as ISAE, SSAE, and SOC (Type I and II) to ensure service provider compliance.
• Provide actionable insights and recommendations to enhance system security, operational efficiency, and audit readiness.
• Collaborate with Agile, DevOps, and ITIL-aligned teams to integrate audit processes into modern delivery pipelines.
• Prepare detailed audit reports and communicate findings effectively to technical and non-technical stakeholders.

What You Bring to the Table:

• 5–8 years of experience in IT auditing with strong exposure to IT General Controls (ITGC).
• Valid IT audit certifications such as CISA (ISACA) or RE (NOREA).
• Strong technical expertise in databases (HANA, MySQL, Oracle), cloud platforms and technologies (MS Azure, GCP, Kubernetes, SAP), and operating systems (MS Windows, Unix, Linux); knowledge of z/OS and DB2 is a plus.
• Good understanding of IT service delivery models, especially ITIL, Agile, and DevOps methodologies.
• Familiarity with frameworks and standards such as ISO 27001/27002, COBIT (for SOX), IT4IT, COSO, and preferred: ISO 27017/27018.
• Exposure to assurance and compliance reporting: ISAE, SSAE, SOC Type I & II.
• Experience using tools such as ServiceNow, Splunk, Office 365, GitHub, and Terraform.
• Excellent command of the English language, both spoken and written; French and/or Dutch is a plus.

You should possess the ability to:

• Independently lead end-to-end IT audits in a complex, modern IT environment.
• Evaluate risks and controls across a wide range of systems and deliver clear, well-structured audit findings.
• Translate audit requirements into actionable items within Agile/DevOps frameworks.
• Manage multiple audit engagements while maintaining accuracy and quality under deadlines.
• Build trust and collaboration with stakeholders at all levels, including technical teams and senior leadership.
• Communicate complex audit issues in simple, impactful language.

What We Bring to the Table:

• An opportunity to work on high-impact IT audits in a modern, cloud-based, and cross-functional IT environment.
• A supportive and international team with a strong focus on innovation, compliance, and professional integrity.
• Continuous learning and certification opportunities to keep your skills at the cutting edge.
• A culture that values transparency, accountability, and growth, where your expertise makes a tangible difference.