IT Audit and Compliance Engineer

Main Tasks :

• Document and update cybsersecurity policies and procedures
• Participate in defining audit objectives, scope, and methodology based on risk assessments.
• Identify critical IT processes, systems, and controls for review (e.g., network, cloud, applications, databases).
• Perform control testing (technical and procedural) across IT infrastructure, security, and business applications.
• Evaluate IT general controls (ITGCs), including access management, change management, and operations.
• Ensure adherence to internal IT policies, standards, and procedures (e.g., data protection, access control).
• Conduct compliance audits against security standards ISO 27001,RNSI, SOX or NIST.
• Conduct Security audits controls and define remediation plan for identified gaps
• Conduct risk assessment using known risk assessment methodologie (ISO 27005..)
• Create network policies and defend against unauthorized access, modifications, and destruction.
• Follow up vulnerability scans reports and ensure that latest security patches are applied.
• Analyze systems, data, and operating environments to determine appropriate security controls
• Participate in business, technical, and security reviews of the solution to explain selected security and privacy controls.

Required Profile :

• 1–3 years in IT audit, IT risk management, cybersecurity, or compliance.

• Good understanding of IT risk management, cybersecurity, and compliance principles.

• Ability to perform control testing, risk assessments, and audit evidence collection.