UC
Unknown company
NewBe an early applicant
Auditor Information Security
Posted
Summary
At DEKRA in Arnhem, you audit organizations on information security and privacy: preparing audits, interviewing management and staff, running remote and international audits, assessing controls (IAM, logging, incident response, encryption), and mapping evidence to frameworks like ISO 27001, NIST, SOC 2, PCI DSS and GDPR before reporting findings and remediation advice.
Finance
Business Support
Auditor Information Security
16-10-2026
Marktconform
Medior, Senior
Arnhem
Als Auditor Information Security bij DEKRA toets je organisaties op informatiebeveiliging en privacy: je bereidt audits voor, interviewt directie en medewerkers, voert remote en internationale audits uit, rapporteert bevindingen en adviseert over verbeterpunten.
Direct solliciteren Neem contact op
Automatisch verbeterd voor betere leesbaarheid
Auditor Information Security
Role purpose: Evaluate and improve an organization's information security posture by planning and executing audits, validating controls, and ensuring compliance with internal standards and external regulations. Key responsibilities - Plan, scope, and conduct information security audits across systems, applications, networks, and third parties. - Assess the design and operating effectiveness of security controls (e.g., IAM, vulnerability management, logging/monitoring, incident response, backup, encryption). - Map evidence to frameworks and requirements such as ISO 27001, NIST, SOC 2, PCI DSS, GDPR, and local regulatory standards as applicable. - Document findings, risk ratings, and remediation recommendations in clear audit reports. - Track corrective actions, validate remediation, and report status to stakeholders. - Collaborate with IT, security, and business teams to improve governance, risk management, and control maturity. Required skills and qualifications - Experience in information security auditing, risk assessment, or IT controls testing. - Knowledge of security frameworks, control testing methods, and audit evidence collection. - Ability to interpret technical configurations, system logs, and security tooling outputs. - Strong report writing, stakeholder communication, and prioritization skills. - Relevant certifications preferred: CISA, CISSP, ISO 27001 Lead Auditor, or equivalent. Success measures - Accurate risk identification, action...
Business Support
Auditor Information Security
16-10-2026
Marktconform
Medior, Senior
Arnhem
Als Auditor Information Security bij DEKRA toets je organisaties op informatiebeveiliging en privacy: je bereidt audits voor, interviewt directie en medewerkers, voert remote en internationale audits uit, rapporteert bevindingen en adviseert over verbeterpunten.
Direct solliciteren Neem contact op
Automatisch verbeterd voor betere leesbaarheid
Auditor Information Security
Role purpose: Evaluate and improve an organization's information security posture by planning and executing audits, validating controls, and ensuring compliance with internal standards and external regulations. Key responsibilities - Plan, scope, and conduct information security audits across systems, applications, networks, and third parties. - Assess the design and operating effectiveness of security controls (e.g., IAM, vulnerability management, logging/monitoring, incident response, backup, encryption). - Map evidence to frameworks and requirements such as ISO 27001, NIST, SOC 2, PCI DSS, GDPR, and local regulatory standards as applicable. - Document findings, risk ratings, and remediation recommendations in clear audit reports. - Track corrective actions, validate remediation, and report status to stakeholders. - Collaborate with IT, security, and business teams to improve governance, risk management, and control maturity. Required skills and qualifications - Experience in information security auditing, risk assessment, or IT controls testing. - Knowledge of security frameworks, control testing methods, and audit evidence collection. - Ability to interpret technical configurations, system logs, and security tooling outputs. - Strong report writing, stakeholder communication, and prioritization skills. - Relevant certifications preferred: CISA, CISSP, ISO 27001 Lead Auditor, or equivalent. Success measures - Accurate risk identification, action...