Senior IT Internal Auditor
Are you passionate about cybersecurity, risk analysis, and driving continuous improvement in IT environments?
We are looking for a multinational company listed on the IBEX 35 index a Senior IT Internal Auditor to play a key role in strengthening their IT governance and ensuring the security and efficiency of their digital systems. You’ll be part of a high-impact team, contributing to audits that support our ongoing digital transformation while collaborating across departments and borders.
What you’ll be doing
- Lead and execute audits of IT systems, applications, and infrastructure, ensuring alignment with internal policies and regulatory frameworks.
- Assess cybersecurity controls across IT and OT environments (including cloud platforms, networks, and databases), identifying vulnerabilities and recommending enhancements.
- Evaluate key IT governance areas such as access and change management, data integrity, and system configurations.
- Partner with the Information Security team to audit network security, encryption practices, and vulnerability management.
- Analyze IT risks and help prioritize audit areas based on criticality and exposure.
- Prepare clear, actionable audit reports for both technical and non-technical audiences.
- Track the implementation of audit recommendations and ensure corrective actions are completed effectively.
- Review the resilience of IT systems as part of business continuity audits.
- Contribute to the design and execution of the annual IT audit plan, incorporating best practices and emerging technologies.
- Work closely with external auditors and consultants, aligning scope and findings.
- Participate in international audits and promote a consistent global approach.
What we’re looking for
Education & Certifications
Bachelor’s degree in IT, Computer Science, Engineering, or a related field.Relevant certifications (CISA, CISSP, CISM, CRISC, etc.) are highly valued.Knowledge of frameworks such as ISO 27001, NIST, CIS Controls, ISA / IEC 62443, and regulations like NIS2, GDPR, ICFR.