Global Cyber Security Auditor & Compliance Champion

Infineon; Porto; On-site; EUR 55,000 - 75,000; Full time

Job summary

Infineon Technologies AG in Porto is looking for a Cyber Security Auditor to lead internal certification activities and perform hands-on IT control audits across Infineon sites worldwide. You will collaborate with security experts to interpret requirements and ensure compliance with ISO 27001, TISAX, ISO/SAE 21434, IEC 62443, and other standards.

The role requires 3+ years in cyber security, audits, or compliance, plus a strong technical understanding of enterprise IT environments and security

Qualifications

• Degree in Computer Science, Information Security, Cyber Security, Information Technology, or a related technical field.
• At least 3 years of professional experience in cyber security, audits, or compliance within an international environment.
• Strong technical understanding of enterprise IT environments and security controls; experience reviewing configurations and evidence.
• Ability to interpret requirements from standards, frameworks, and regulatory obligations to derive audit procedures.
• Strong knowledge of ISO/IEC 27001, TISAX, ISO/SAE 21434, IEC 62443, Common Criteria, and NIST CSF.
• Relevant certifications such as CISA, CISM, CISSP, ISO 27001 Lead Auditor or equivalent are an advantage.
• Fluency in English.

Responsibilities

• Plan, coordinate, and lead internal certification activities according to ISO/IEC 27001, ISO/SAE 21434, TISAX, GSMA, Common Criteria, and IEC 62443 , covering both organizational and technical security controls
• Conduct internal 2nd LoD cyber security audits across Infineon sites worldwide and perform security assessments of external partners, suppliers, and service providers
• Perform hands-on technical IT control audits to verify that defined IT security controls and requirements are correctly implemented and effectively applied in IT systems and environments, including reviewing server and system configurations, network security settings, and identity and access management
• Identify security gaps, non-conformities, and risks; support stakeholders in defining and implementing corrective actions; perform risk assessment, treatment, and monitoring activities; and ensure effective closure of audit findings and recommendations
• Evaluate the effectiveness of security controls, governance processes, and compliance measures within Infineon's Cyber Security & Privacy Management System, providing independent assurance regarding their implementation and effectiveness
• Collaborate with business functions and security experts to interpret security requirements, define assessment criteria, and ensure compliance with internal policies, customer requirements, and regulatory obligations
• Contribute to the continuous improvement of audit methodologies, verification activities, governance processes , assessment frameworks, and supporting tools, while supporting initiatives that strengthen Infineon's global cyber security and certification landscape

Skills

Cyber security expertise

Audit / assessment experience

Information security

English fluency

Regulatory / compliance understanding

ISO/IEC 27001 knowledge

TISAX knowledge

NIST CSF knowledge

Education

Bachelor's degree in Computer Science / Information Security / Cyber Security / Information Technology

Job description

Infineon Technologies AG in Porto is looking for a Cyber Security Auditor to lead internal certification activities and perform hands-on IT control audits across Infineon sites worldwide. You will collaborate with security experts to interpret requirements and ensure compliance with ISO 27001, TISAX, ISO/SAE 21434, IEC 62443, and other standards.

The role requires 3+ years in cyber security, audits, or compliance, plus a strong technical understanding of enterprise IT environments and security