Senior IT Internal Auditor Project Manager

Senior IT Internal Auditor

Are you passionate about cybersecurity, risk analysis, and driving continuous improvement in IT environments?

We are looking for a multinational company listed on the IBEX 35 index a Senior IT Internal Auditor Project Manager to play a key role in strengthening their IT governance and ensuring the security and efficiency of their digital systems. You’ll be part of a high-impact team, contributing to audits that support our ongoing digital transformation while collaborating across departments and borders.

What you’ll be doing

Lead and execute audits of IT systems, applications, and infrastructure, ensuring alignment with internal policies and regulatory frameworks.

Assess cybersecurity controls across IT and OT environments (including cloud platforms, networks, and databases), identifying vulnerabilities and recommending enhancements.

Evaluate key IT governance areas such as access and change management, data integrity, and system configurations.

Partner with the Information Security team to audit network security, encryption practices, and vulnerability management.

Analyze IT risks and help prioritize audit areas based on criticality and exposure.

Prepare clear, actionable audit reports for both technical and non-technical audiences.

Track the implementation of audit recommendations and ensure corrective actions are completed effectively.

Review the resilience of IT systems as part of business continuity audits.

Contribute to the design and execution of the annual IT audit plan, incorporating best practices and emerging technologies.

Work closely with external auditors and consultants, aligning scope and findings.

Participate in international audits and promote a consistent global approach.

What we’re looking for

Education & Certifications

Bachelor’s degree in IT, Computer Science, Engineering, or a related field.

Relevant certifications (CISA, CISSP, CISM, CRISC, etc.) are highly valued.

Knowledge of frameworks such as ISO 27001, NIST, CIS Controls, ISA / IEC 62443, and regulations like NIS2, GDPR, ICFR.