Internal Auditor IT

at  Cargolux

ESSENTIAL REQUIREMENTS FOR THE POSITION:

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or a related field.
• Proven experience (3+5 years) in IT auditing , information security , or risk management roles. Familiarity with IT governance frameworks such as COBIT, ITIL or NIST would be considered an advantage.
• Strong understanding of IT systems, networks, databases, and cybersecurity concepts.
• Experience with auditing tools and techniques.
• Knowledge of compliance requirements for frameworks like ISO 27001, NIS 2 or PART IS is a plus .
• Industry-recognized certifications, such as CISA ( Certified Information Systems Auditor), would be an advantage.
• Strong analytical and problem solving skills with the ability to identify risks and recommend practical solutions.
• Excellent communication and reporting skills to present technical findings to both technical and non technical stakeholders.
• Ability to manage multiple projects and prioritize tasks in a dynamic environment.
• High attention to detail and ethical standards.
• Proactive mindset with can do attitude and focus on continuous improvement and risk prevention.Excellent verbal and written English communication skills. Any other language is an advantage.

The IT auditor will be responsible for the following tasks:

• Performing comprehensive audits of IT systems, applications, infrastructure regulations and standards.
• Evaluating the effectiveness of information security controls, identifying gaps and providing actionable recomendations to mitigate risks.
• Assessing the organization’s compliance with regulatory frameworks such as NIS2, PART IS, and ISO 27001, as well as ensure proper documentation of audit findings and recommendations.
• Collaborating with IT teams to monitor and enhance cybersecurity measures , review third party vendor risks, and support efforts to strenghten overall IT security and governance and internal control system.
• Collaborating with the Sr. IT Internal Auditor and the Internal Audit team to conduct additional IT audits, focusing on organizational risk areas.