Senior IT Internal Auditor

Senior IT Internal Auditor

Are you passionate about cybersecurity, risk analysis, and driving continuous improvement in IT environments?

We are looking for for a multinational company listed on the IBEX 35 index a Senior IT Internal Auditor to play a key role in strengthening our IT governance and ensuring the security and efficiency of our digital systems. You'll be part of a high-impact team, contributing to audits that support our ongoing digital transformation while collaborating across departments and borders.

What you'll be doing

• Lead and execute audits of IT systems, applications, and infrastructure, ensuring alignment with internal policies and regulatory frameworks.
• Assess cybersecurity controls across IT and OT environments (including cloud platforms, networks, and databases), identifying vulnerabilities and recommending enhancements.
• Evaluate key IT governance areas such as access and change management, data integrity, and system configurations.
• Partner with the Information Security team to audit network security, encryption practices, and vulnerability management.
• Analyze IT risks and help prioritize audit areas based on criticality and exposure.
• Prepare clear, actionable audit reports for both technical and non-technical audiences.
• Track the implementation of audit recommendations and ensure corrective actions are completed effectively.
• Review the resilience of IT systems as part of business continuity audits.
• Contribute to the design and execution of the annual IT audit plan, incorporating best practices and emerging technologies.
• Work closely with external auditors and consultants, aligning scope and findings.
• Participate in international audits and promote a consistent global approach.

What we're looking for

Education & Certifications

• Bachelor's degree in IT, Computer Science, Engineering, or a related field.
• Relevant certifications (CISA, CISSP, CISM, CRISC, etc.) are highly valued.
• Knowledge of frameworks such as ISO 27001, NIST, CIS Controls, ISA/IEC 62443, and regulations like NIS2, GDPR, ICFR.

Experience

• 6-8 years in IT auditing, cybersecurity, or IT risk management.
• Hands-on experience auditing IT systems and infrastructures, with a strong understanding of cybersecurity and IT governance.

️ Tools & Skills

• Proficiency in SAP, cloud platforms (Azure, AWS), IT security tools, data analytics, and audit management software.
• Strong analytical mindset and problem-solving skills.
• Excellent communication skills to convey complex technical findings clearly.
• Ability to manage multiple priorities in a dynamic environment.

Languages

• Spanish: Advanced
• English: Advanced
• Additional European languages: a plus