IT Security Auditor

An IT Security Auditor works within the Cyber Security, Risk and Compliance team to assess IT systems and applications for vulnerabilities and policy infringements, developing corrective actions to enhance cybersecurity. The role involves collaborating with security professionals to ensure audit consistency and compliance with industry standards such as ISO27000, NIST, and CIS. The successful candidate will support cyber security policies, perform audits, and analyse outputs to inform improvements across processes and technologies. They will present findings to senior management and contribute to wider cyber security initiatives, including audit planning and policy development. Competent communication skills and understanding of cloud infrastructure, security frameworks, and risk management practices are essential, alongside relevant certifications and a proactive approach to ongoing learning.