This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
A seasoned Information Security Expert to join our client’s global security operations. In this role, you will provide critical visibility into the security posture of the client’s international vendor network. We are looking for someone with a deep analytical mindset capable of conducting end-to-end audits to safeguard major assets within a global financial environment.
Job Responsibility:
Audit Planning & Scoping: Define scope, objectives, and methodology based on risk
create detailed work plans and documentation
Deep-Dive Auditing & Analysis: Review security controls, SaaS applications, and cloud environments using manual evidence reviews and automated tools (SIEM, scanners)
Risk Identification & Assessment: Identify control weaknesses and policy deviations, documenting findings with clear evidence
Reporting & Stakeholder Communication: Prepare detailed reports and present findings to technical teams and management
Remediation Support & Validation: Support remediation planning and perform follow-up assessments to verify effectiveness
Continuous Improvement: Strengthen internal controls, optimize tools, and share best practices with the wider organization
Requirements:
Typically 6-8 years of experience in internal audit, security auditing, IT risk, or compliance
Strong hands-on experience analyzing logs, configurations, and system behavior
Proven experience in SaaS environments and cloud security is a strong plus
Prior exposure to security-related posture reviews is preferred
Technical Excellence: Deep understanding of IT Security controls, access governance, and frameworks (ISO 27001, SOC 2, NIST, CIS, GDPR)
Analytical Prowess: Exceptional attention to detail with the ability to identify patterns, anomalies, and root causes
Communication: Strong documentation and presentation skills, comfortable working with cross-functional teams (Security, IT, DevOps, Compliance, Business)
Preferred Certifications: CISA (Certified Information Systems Auditor), ISO 27001 Lead Auditor, or CRISC
Nice to have:
Proven experience in SaaS environments and cloud security
Prior exposure to security-related posture reviews
Preferred Certifications: CISA (Certified Information Systems Auditor), ISO 27001 Lead Auditor, or CRISC