Vacancy – IT Security Auditor

Integration Corporation; Amsterdam; Híbrido; EUR 70.000 - 100.000; Jornada completa

Descripción de la vacante

Integration Corporation is seeking an IT Security Auditor who will assess security, access management, continuity and supplier controls. You report findings clearly and define improvement measures for management and boards.

You will plan and perform IT security audits, test identity and access management (roles and privileges), review business continuity and disaster recovery, and assess supplier and cloud controls with ISAE 3402 and SOC 2.

Formación

• Proven experience conducting IT security audits and control assessments.
• Ability to identify risks and translate findings into actionable improvements.
• Strong report writing and presentation skills for management and boards.

Responsabilidades

• Plan and perform IT security audits and control assessments
• Test identity and access management, including roles, privileges and segregation of duties
• Assess business continuity, backup and disaster recovery arrangements
• Review supplier and cloud controls, including ISAE 3402 and SOC 2
• Assess compliance with ISO 27001, NIS2 or DORA
• Report findings and risks clearly to management and boards
• Define improvement measures and follow up on their implementation

Conocimientos

IT security auditing

Risk assessment

Report writing

Board communication

Educación

Bachelor's degree in IT/Security

Descripción del empleo

As IT Security Auditor at Integration Corporation you assess security, access management, continuity and supplier controls. You report findings clearly and define improvement measures that organizations can implement.

• Plan and perform IT security audits and control assessments
• Test identity and access management, including roles, privileges and segregation of duties
• Assess business continuity, backup and disaster recovery arrangements
• Review supplier and cloud controls, including assurance reports such as ISAE 3402 and SOC 2
• Assess compliance with frameworks and regulations such as ISO 27001, NIS2 or DORA
• Report findings and risks clearly to management and boards
• Define improvement measures and follow up on their implementation