We are looking for a Junior IT Security Auditor to join our cybersecurity team.
The main mission of the role will be to perform security assessments and audits of information systems, identify vulnerabilities and non-conformities, and recommend appropriate technical and organizational measures to strengthen security.
The IT Security Auditor will contribute to ensuring technical, operational, regulatory, and legal compliance across information systems.
Key Responsibilities
Security Audits & Risk Analysis
- Perform and support IT security audits and assessments.
- Participate in local security inspections, including vulnerability assessments, penetration tests, and architecture reviews.
- Identify security risks, vulnerabilities, and non-conformities.
- Assess the correct implementation of security procedures and controls.
- Follow up on identified risks and remediation actions.
Security & Compliance
- Review organizational and technical security controls.
- Assess Disaster Recovery Plans (DRP), Business Continuity measures, and DLP (Data Loss Prevention) controls.
- Verify compliance with applicable security standards, policies, and regulatory requirements.
- Monitor the implementation of audit recommendations and corrective actions.
Reporting & Advisory
- Prepare security audit reports describing identified vulnerabilities, risks, and non-conformities.
- Provide technical and organizational recommendations to mitigate identified risks.
- Prepare technical documentation and security guidance on Information Systems Security topics.
- Communicate audit findings clearly to relevant technical and business stakeholders.
Security Monitoring & Continuous Improvement
- Maintain an active technology and cybersecurity watch on relevant threats, vulnerabilities, regulations, and security practices.
- Contribute to the continuous improvement of security audit methodologies and processes.
- Support the development or improvement of tools used for security assessments and audits.
Profile
- Degree in Computer Science, Cybersecurity, Telecommunications, Information Systems, or a related field.
- Initial professional experience or strong academic background in IT Security, Cybersecurity Audit, IT Risk, or GRC.
- Understanding of information security principles and risk management.
- Knowledge of areas such as:
- IT Security Auditing
- Risk Assessment
- Vulnerability Management
- DLP
- Business Continuity / Disaster Recovery
- Security Compliance
- Security architecture
- Familiarity with security standards and frameworks such as ISO 27001, NIST, CIS Controls, or similar is valued.
- Basic knowledge of vulnerability assessment and penetration-testing concepts.
- Strong analytical and documentation skills.
- Ability to communicate security findings clearly and provide practical recommendations.
Seniority
Beginner / Junior Level
Main Deliverables
- IT Security Audit Reports
- Vulnerability and Risk Assessments
- Technical and Organizational Recommendations
- Non-Conformity Follow-up Reports
- Security Technical Documentation
Performance Indicators
- Number of security audits performed.
- Implementation rate of audit recommendations.
- Follow-up and resolution of identified non-conformities
100% remote from Spain.
Medical Insurance.
B2 English.
Free Language classes.
Flexible salary.