Hybrid InfoSec & Risk Audit Manager

Grant Thornton International; Województwo wielkopolskie; Hybrid; PLN 180,000 - 260,000; Full time

Benefits offered by this job

Hybrid work model (2 days in office, 3

Job summary

Grant Thornton International seeks an Audit Manager for Information Security & Risk Management to lead internal and external audits across the organization. The role reports to the CISO office, collaborating with the Governance, Risk and Compliance function to design and maintain a cohesive information security program.

The ideal candidate blends technical security knowledge with audit and risk management expertise.

Qualifications

• Experience with information security frameworks (e.g., NIST 800-53; ISO 27001; ISO 27017; COSO; HITRUST).
• Experience with regulatory requirements (e.g., GDPR).
• Experience performing IT audits and control testing.

Responsibilities

• Develop audit programs and plans, determine scope, and manage internal/external audit engagements.
• Oversee audits, recommend policies, and ensure compliance obligations.
• Coordinate/perform audit work, review reports, and support management responses.
• Identify deficient conditions and provide constructive recommendations for corrective actions.
• Support risk assessments and control testing across critical processes and systems.

Skills

Audit management

Communication skills

Risk assessment

Regulatory knowledge

Education

Bachelor's degree in Computer Science or related field

Tools

GRC tools

Job description

Grant Thornton International seeks an Audit Manager for Information Security & Risk Management to lead internal and external audits across the organization. The role reports to the CISO office, collaborating with the Governance, Risk and Compliance function to design and maintain a cohesive information security program.

The ideal candidate blends technical security knowledge with audit and risk management expertise.