Auditor Information Security

Taken

Als Auditor Information Security bij DEKRA toets je organisaties op informatiebeveiliging en privacy: je bereidt audits voor, interviewt directie en medewerkers, voert remote en internationale audits uit, rapporteert bevindingen en adviseert over verbeterpunten.

Role purpose: Evaluate and improve an organization's information security posture by planning and executing audits, validating controls, and ensuring compliance with internal standards and external regulations.

• Plan, scope, and conduct information security audits across systems, applications, networks, and third parties.
• Assess the design and operating effectiveness of security controls (e.g., IAM, vulnerability management, logging/monitoring, incident response, backup, encryption).
• Map evidence to frameworks and requirements such as ISO 27001, NIST, SOC 2, PCI DSS, GDPR, and local regulatory standards as applicable.
• Document findings, risk ratings, and remediation recommendations in clear audit reports.
• Track corrective actions, validate remediation, and report status to stakeholders.
• Collaborate with IT, security, and business teams to improve governance, risk management, and control maturity.

Success measures

• Accurate risk identification, action...

Vereisten

Required skills and qualifications

• Experience in information security auditing, risk assessment, or IT controls testing.
• Knowledge of security frameworks, control testing methods, and audit evidence collection.
• Ability to interpret technical configurations, system logs, and security tooling outputs.
• Strong report writing, stakeholder communication, and prioritization skills.
• Relevant certifications preferred: CISA, CISSP, ISO 27001 Lead Auditor, or equivalent.

Sollicitatie

Direct solliciteren Neem contact op Automatisch verbeterd voor betere leesbaarheid

Overig

Finance · Business Support Auditor Information Security 16-10-2026 Marktconform Medior, Senior Arnhem