Internal Controls Specialist (ICS)

Job Description: Senior IT Auditor – EU AI Act, ISMS & IT Governance

Position: IT Auditor 

Location

Flexible / Hybrid

Experience

4 to 6

Notice Period -0 to 30 days 

Job Summary

We are seeking an experienced Senior IT Auditor with expertise in EU AI Act compliance, Information Security Management Systems (ISMS), IT Infrastructure Audits, IT Systems Audits, Risk Management, and Regulatory Compliance. The ideal candidate will lead and perform audits against international standards and frameworks, assess technology risks, and ensure compliance with organizational and regulatory requirements.

Key Responsibilities

IT Audit & Compliance

• Plan, execute, and report on IT audits covering infrastructure, applications, cloud environments, cybersecurity controls, and business processes.
• Conduct assessments of IT General Controls (ITGC), IT systems, and IT infrastructure to ensure effectiveness and compliance.
• Evaluate organizational compliance with regulatory frameworks, standards, and industry best practices.
• Perform risk assessments and recommend remediation actions for identified control gaps.
EU AI Act & AI Governance

• Assess AI governance frameworks and organizational readiness for compliance with the EU AI Act.
• Review controls related to AI risk management, transparency, data governance, model monitoring, and accountability.
• Conduct audits of AI systems and related processes to ensure regulatory compliance and responsible AI practices.
Information Security & Privacy

• Lead audits aligned with ISO 27001, ISO 27701, ISO/IEC 42001, and other relevant standards.
• Evaluate security policies, procedures, and technical controls related to information security and privacy.
• Assess identity and access management, vulnerability management, incident management, business continuity, and disaster recovery controls.
• Review compliance with data protection and privacy requirements.
Stakeholder Management

• Collaborate with business, technology, risk, and compliance teams.
• Present audit findings, recommendations, and risk assessments to management and senior stakeholders.
• Track audit observations through remediation and closure.
Continuous Improvement

• Support the enhancement of audit methodologies and compliance frameworks.
• Monitor emerging regulatory requirements, cybersecurity threats, and industry best practices.
Required Qualifications

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Information Systems, or a related discipline.
• 8+ years of experience in IT Audit, Information Security, Risk Management, Compliance, or Governance.
• Strong experience in:• IT Infrastructure Audits
• IT Systems Audits
• Information Security Audits
• Risk and Compliance Assessments
• EU AI Act Compliance
• ITIL-based Control Reviews

Mandatory Certifications

Candidates should possess one or more of the following certifications:

• CISA (Certified Information Systems Auditor)
• ISO/IEC 42001 Lead Auditor
• ISO 27001 Lead Auditor / ISMS Lead Auditor
• ISMS Auditor
• ISO 27701 Lead Auditor / Auditor
• ICS Auditor
• ISO 22301 Lead Auditor (Preferred)
• CRISC, CISSP, CISM (Preferred)
Required Technical Skills

• Information Security Management Systems (ISMS)
• ITIL Framework and IT Service Management Audits
• IT Infrastructure Audit
• IT Systems Audit
• Cybersecurity Governance
• Risk Management Frameworks
• ISO 27001, ISO 27701, ISO/IEC 42001
• AI Governance and Responsible AI Controls
• Internal Controls Testing
• Third-Party Risk Assessments
• Cloud Security Audits (Azure, AWS, GCP)
• Security Compliance Monitoring
Preferred Experience

• Experience auditing AI/ML systems and governance frameworks.
• Experience in highly regulated industries such as Financial Services, Healthcare, Manufacturing, or Technology.
• Strong knowledge of European regulatory and compliance requirements.
• Experience working with global stakeholders and cross-functional teams.

Function: Engineering
Experience Level: Not Applicable