Cyber Security Auditor (f/m/div)

Infineon; Porto; On-site; EUR 55,000 - 75,000; Full time

Job summary

Infineon Technologies AG in Porto is looking for a Cyber Security Auditor to lead internal certification activities and perform hands-on IT control audits across Infineon sites worldwide. You will collaborate with security experts to interpret requirements and ensure compliance with ISO 27001, TISAX, ISO/SAE 21434, IEC 62443, and other standards.

The role requires 3+ years in cyber security, audits, or compliance, plus a strong technical understanding of enterprise IT environments and security

Qualifications

• Degree in Computer Science, Information Security, Cyber Security, Information Technology, or a related technical field.
• At least 3 years of professional experience in cyber security, audits, or compliance within an international environment.
• Strong technical understanding of enterprise IT environments and security controls; experience reviewing configurations and evidence.
• Ability to interpret requirements from standards, frameworks, and regulatory obligations to derive audit procedures.
• Strong knowledge of ISO/IEC 27001, TISAX, ISO/SAE 21434, IEC 62443, Common Criteria, and NIST CSF.
• Relevant certifications such as CISA, CISM, CISSP, ISO 27001 Lead Auditor or equivalent are an advantage.
• Fluency in English.

Responsibilities

• Plan, coordinate, and lead internal certification activities according to ISO/IEC 27001, ISO/SAE 21434, TISAX, GSMA, Common Criteria, and IEC 62443 , covering both organizational and technical security controls
• Conduct internal 2nd LoD cyber security audits across Infineon sites worldwide and perform security assessments of external partners, suppliers, and service providers
• Perform hands-on technical IT control audits to verify that defined IT security controls and requirements are correctly implemented and effectively applied in IT systems and environments, including reviewing server and system configurations, network security settings, and identity and access management
• Identify security gaps, non-conformities, and risks; support stakeholders in defining and implementing corrective actions; perform risk assessment, treatment, and monitoring activities; and ensure effective closure of audit findings and recommendations
• Evaluate the effectiveness of security controls, governance processes, and compliance measures within Infineon's Cyber Security & Privacy Management System, providing independent assurance regarding their implementation and effectiveness
• Collaborate with business functions and security experts to interpret security requirements, define assessment criteria, and ensure compliance with internal policies, customer requirements, and regulatory obligations
• Contribute to the continuous improvement of audit methodologies, verification activities, governance processes , assessment frameworks, and supporting tools, while supporting initiatives that strengthen Infineon's global cyber security and certification landscape

Skills

Cyber security expertise

Audit / assessment experience

Information security

English fluency

Regulatory / compliance understanding

ISO/IEC 27001 knowledge

TISAX knowledge

NIST CSF knowledge

Education

Bachelor's degree in Computer Science / Information Security / Cyber Security / Information Technology

Job description

#WeAreIn for jobs that impact everyone's life.

Behind every breakthrough is a blueprint: ready to shape the strategy that propels innovation? As a Cyber Security Auditor in our Corporate Functions team become the heart of our organization by developing strategies, refining processes, and implementing initiatives that empower our business to thrive. Are you in?

Your role Key responsibilities in your new role

• Plan, coordinate, and lead internal certification combined assessment activities according to internationally recognized standards such as ISO/IEC 27001, ISO/SAE 21434, TISAX, GSMA, Common Criteria, and IEC 62443 , covering both organizational and technical security controls
• Conduct internal 2nd LoD cyber security audits across Infineon sites worldwide and perform security assessments of external partners, suppliers, and service providers
• Perform hands-on technical IT control audits to verify that defined IT security controls and requirements are correctly implemented and effectively applied in IT systems and environments, including reviewing server and system configurations, network security settings, and identity and access management
• Identify security gaps, non-conformities, and risks; support stakeholders in defining and implementing corrective actions; perform risk assessment, treatment, and monitoring activities; and ensure effective closure of audit findings and recommendations
• Evaluate the effectiveness of security controls, governance processes, and compliance measures within Infineon's Cyber Security & Privacy Management System, providing independent assurance regarding their implementation and effectiveness
• Collaborate with business functions and security experts to interpret security requirements, define assessment criteria, and ensure compliance with internal policies, customer requirements, and regulatory obligations
• Contribute to the continuous improvement of audit methodologies, verification activities, governance processes , assessment frameworks, and supporting tools, while supporting initiatives that strengthen Infineon's global cyber security and certification landscape

Your profile Qualifications and skills to help you succeed

• A degree in Computer Science, Information Security, Cyber Security, Information Technology , or a related technical field
• At least 3 years of relevant professional experience in Cyber Security, Information Security, Audit, Security Engineering, Compliance, or Consulting Experience conducting audits, assessments, certification activities, or compliance reviews within an international environment
• A strong technical understanding of enterprise IT environments and security controls , combined with experience reviewing technical configurations and system-generated evidence to assess whether defined security requirements and controls are correctly implemented in areas such as systems and infrastructure security, identity and access management, network security, and secure configuration
• The ability to interpret requirements from security standards, control frameworks, and regulatory requirements and derive appropriate audit, assessment, and testing procedures
• Strong understanding of internationally recognized security standards, frameworks, and certification schemes such as ISO/IEC 27001, TISAX , ISO/SAE 21434, IEC 62443, Common Criteria, and NIST CSF.
• Relevant certifications such as CISA, CISM, CISSP, ISO 27001 Lead Auditor, or equivalent qualifications are considered an advantage
• Fluency in English

#WeAreIn for driving decarbonization and digitalization.

As a global leader in semiconductor solutions in power systems and IoT, Infineon enables game-changing solutions for green and efficient energy, clean and safe mobility, and smart and secure IoT. Together, we drive innovation and customer success, while caring for our people and empowering them to reach ambitious goals. Be a part of making life easier, safer and greener. Are you in? We are on a journey to create the best Infineon for everyone. We strive to create the best Infineon for everyone by embracing diversity and inclusion. We welcome applicants for who they are and offer a workplace built on trust, openness, respect and equal opportunity. Our hiring decisions are based on skills and experience. Even if you don’t meet every requirement, we encourage you to apply. Please let your recruiter know if you need any accommodations during the interview process. Learn more about our various contact channels and about Diversity & Inclusion at Infineon. Regan Lottering, LinkedIn