information security auditor

Confidential Company

<p>Conduct periodic security audits &amp; assessments (internal &amp; external)</p><ul><li>Review security policies, procedures, standards, and controls</li><li>Assess and validate existing technical and operational security controls</li><li>Risk assessments: identify, evaluate, and prioritize security risks</li><li>Assess maturity of security controls, identify gaps vs frameworks (ISO 27001, NIST, CIS, etc.)</li><li>Review incident response readiness, playbooks, and past incident analyses</li><li>Monitor SOC / threat detection / alerting processes (if applicable) and understand SIEM, IDS/IPS, incident response, threat hunting</li><li>Provide gap analysis against standards (e.g. ISO 27001, NIST CSF, SOC 2)</li><li>Prepare audit findings reports, articulate recommendations and roadmap</li><li>Conduct vendor / third-party security reviews</li><li>Produce findings reports, guide remediation, and follow up to closure</li><li>Review network, endpoint, identity, access, encryption controls, etc</li><li>Mentor internal security staff (if any)</li><li>Stay updated with evolving threats, regulatory changes</li></ul><p><strong>Minimum Qualifications</strong></p><ul><li>Bachelor degree in Computer Science, Information Security, Engineering or equivalent</li><li>5-7 years in cybersecurity / information security roles</li><li>Experience in a SOC environment or with managed detection &amp; response services</li><li>Hands-on experience in security audits and assessments</li><li>Strong technical skills: networking, logging &amp; monitoring, vulnerability management</li><li>Certifications: ISO 27001 LA, ISO 27001 LI, CISA, CISSP, CISM, or equivalent</li><li>Experience with major frameworks (ISO 27001, NIST, SOC, etc.)</li><li>Excellent report writing and stakeholder management skills</li><li>Strong ethical standards, confidentiality, and objectivity</li></ul><p><strong>Preferred / Advantageous</strong></p><ul><li>Experience in your industry or regulatory regime</li><li>Experience in cloud security (AWS, Azure, GCP)</li><li>Experience with threat hunting, red teaming, or offensive security</li><li>ISO 27001 Lead Auditor certification</li><li>Experience in privacy / data protection compliance</li></ul><br/><p>Language </p><p>Arabic &amp; English is a must </p><p> </p>

Information Security Consultant / Auditor

The Certification International

<p>we need Job Vacancy / Job Opening</p><p>We are looking for a Lead Auditor certified and experienced in the following management systems:</p><p>ISO 22301 (Business Continuity Management)</p><p>ISO 41001 (Facility Management)</p><p>ISO 27001 (Information Security Management)</p><p>ISO 50001 (Energy Management)</p><p>* ISO 28000*</p><p>(Supply Chain Security Management System - SCSMS)</p><p>Job Type: Part-time</p>

Lead Auditor

DiXiO Experts

<b>We are hiring!</b> <p></p> <p>DiXiO is on a mission to innovate financial messaging, and now, you can be part of it too!</p> <p>We are looking for a<b> Cybersecurity Auditor </b>who will join a team of experts to help us secure our applications for the financial messaging industry. The role holder is responsible for running independent assessments for our clients to ensure that their infrastructures are safe and secure.</p> <p> <strong>Things you will do:</strong> </p> <div>  Execute the day-to-day activities of IT audit engagements, including planning, fieldwork,</div> <div>reporting and follow up on audit findings</div> <div>  Responsible for leading and delivering audit assignments globally using a risk-based</div> <div>approach to deliver a wide range of IT governance, cyber/IT/data security, risk, and</div> <div>regulatory compliance related audits for various organizations.</div> <div>  Perform risk-based audits and assess the effectiveness of controls in place</div> <div>  Evaluate the design and effectiveness of technology controls throughout the business cycle</div> <div>  Prepare and present written reports and other technical information in a pertinent, concise,</div> <div>and accurate manner for distribution to management/clients and identify and other related</div> <div>stakeholders.</div> <div> <br> </div> <p> <strong>To be part of our team, you need to be:</strong> </p> <ul> <li>Ambitious</li> <li>Curious and Innovative</li> <li>Autonomous</li> <li>Team-player</li> </ul> <p> <strong>Things that you need to succeed on this job:</strong> </p> <ul> <li>1 - 2 years of experience in Cybersecurity and IT Risk Management</li> <li>MS Office 365 Applications </li> <li>Knowledge of Information Security, IT Risk Management, IT Audit, IT Governance, SWIFT CSCF Compliance, ISO/IEC 27001, NIST, COBIT</li> <li>Proficient in English and Arabic</li> <li>Knowledge of IT infrastructure security (firewalls, databases, OS, etc.)  </li> </ul> <p> <strong>Why you will love working with us:</strong> </p> <p>If you are searching for an organization that is willing to invest in your professional career, look no more. We provide our Experts with all the tools and investments needed to fulfil their career and professional aspirations. You also don t need to worry about getting stuck in traffic at 8:00AM, we are 100% remote, and our Experts can work from anywhere! Our team also enjoys an unlimited number of leave days to make sure they are reaching a work-life balance. That s not all, our packages include a medical insurance and performance-based bonus!</p> <p><br></p> 
<div></div>

IT/ Cyber Security Auditor (Remote)

LRQA group

<div><div>Job ID:43019<br>
Location:Dubai : Festival Office Tower<br>
Position Category:Assessors<br>
Position Type:Employee Regular</div>
<p><b>
Location- Dubai or Abu Dhabi, United Arab Emirates</b></p>
<p>
Are you looking for an independent technical job with a lot of freedom? Do you like visiting a great variety of customers all around the country? Do you want to be part of an internationally renowned organisation to develop yourself further? And do you want to contribute to a safer world by sharing your knowledge with organisations? <b>Then join LRQA as lead auditor</b></p><br>
<p>
</p><p><b>What are you going to do?</b></p>
<ul>
<li>Within authorised area of specialism, undertake business assurance assessments in accordance with current procedures and agreed timescales.</li>
<li>Lead assessment teams effectively, ensuring that the visit is completed within the agreed timescales, and co-ordinating team findings to reach conclusions.</li>
<li>Produce high quality assessment reports reflecting business assurance principles in compliance with accreditation requirements and internal procedures.</li>
<li>Ensure that all internal client stakeholders are kept informed of changes and issues, escalating as appropriate.</li>
<li>Pass opportunities and sales leads to appropriate colleagues to progress.</li>
<li>Pass client feedback and insights to appropriate internal recipients.</li>
<li>Perform duties as product specialist, technical reviewer when qualified to do so.
</li><li>Maintain professional competence by keeping abreast of technical and other developments in own area of expertise, maintaining CPD records, updating CV, maintaining professional registrations and producing records of competence as required.</li>
<li>Actively build strong client and internal relationships.</li>
<li>Participate fully in Assessor meetings.</li>
<li>Perform additional and ad hoc tasks promptly as required such as assessor development, product development or projects.</li></ul><br>
<p></p>
<p><b>
What do we ask from you?</b></p>
<ul>
<li>Bachelor&rsquo;s degree in computer science/electronics engineering or equivalent
</li><li>Knowledge of Arabic and English language and ability to communicate both verbal and written effectively.
</li><li>At least four years full time practical working experience in Information Technology, of which at least two years is in a role or function relating to Information Security</li>
<li>Attended and passed an IRCA registered (or equivalent) Lead Auditor training course recognised by LRQA in ISO 9001, ISO 22301 and ISO 27001/20000.
</li><li>In depth knowledge and auditing experience pertaining to various industry sectors
</li><li>Working experience with a recognised certification body pertaining to management system certification audits.
</li><li>A good understanding of the legal and regulatory framework and requirements of the sector including local laws.
</li><li>Preparedness to travel overseas if required.
</li></ul><p><b>Following will be added advantage</b></p>
<ul>
<li>Native Arabic, conversant with Arabic and English oral and written communication</li>
<li>ISACA Qualifications like CISA, CISSP, CISM or equivalent for IT</li>
<li>Knowledge of other standards like ISO 14001/EMS and ISO 45001/OHSMS</li>
<li>3RD Party auditing experience in Government sector</li><br>
</ul>
<div></div><div><b>Note- Please quote your expected salary package while applying.</b></div><br>
<div><b>
</b></div><div><b>About LRQA</b></div>
<div>
LRQA distinguishes itself through knowledge, independence and impartiality. LRQA offers a comprehensive package of professional and independent services that support customers throughout the entire lifecycle of their management systems. Due to the dedication, expertise and customer focus of the employees, LRQA guarantees that management systems become more efficient and effective.</div><br>
<div></div>
<div><b>
What does LRQA offer?</b></div>
<div>
We offer you a challenging and varied role, where you will visit large reputable companies. The diversity of assignments makes it fun and challenging for you to go out every time. LRQA is the organization to further expand your knowledge and to further specialize yourself. Of course, we also support you in obtaining and maintaining the required qualifications necessary to perform your job!</div><p></p><div><br>
Diversity and Inclusion at LRQA:</div>
<div>We are on a mission to be the place where we all want to work and we are passionate about embracing different perspectives because we understand the value this brings to our business, our clients and each other. We are all about creating a safer and more sustainable future and our inclusive culture is right at the heart of our business.</div>
<div>Together our employees make our communities better and we want you to be part of our diverse team!</div>
<div>LRQA is a leading global assurance provider. The integrity and expertise we bring to our partnership with clients support their journey to a safer, more secure and more sustainable future. (Group entities).</div></div><div></div>

ISMS/BCM Auditor for UAE

Amazon.com

<div><h2 class="jobSectionHeader"><b>DESCRIPTION</b></h2><p>
Amazon is seeking a Senior IT Auditor to join Finance Operations Risks, Governance and Experience (FORGE) team. We have a complex service-oriented architecture (SOA) environment. You need a sound technical and commercial understanding background and the ability to learn new concepts quickly. In this position, you must be able to understand technologies used for managing complex business processes and identify the full range of risks related to processes that may include financial, regulatory compliance, operations, and organization policy. You should be comfortable interacting with highly technical software development engineers and business leaders. You need a broad technical background and the ability to learn new technology concepts quickly. You must be contented in performing as a sole contributor and teammate.
<br>
<br>
In this role, you will execute IT audits across all areas of our Finance Operations businesses. You will independently perform and execute audit plans, perform data analytics, prepare written findings, and facilitate business responses and follow up on action items. We will not only expect you to find risks but should be able to interpret technical risks into business issues. You will provide support to business partners to identify opportunities for control improvements with the objective of mitigating risk and improving operational performance. IT audit areas will include but not limited to technologies used in finance, accounts payables, operations, account receivables, corporate facilities, and payroll, among others. Additionally, you will participate in adhoc assignments on priority basis and as directed by FORGE leadership.
<br>
<br>
You must be an excellent writer who can concisely communicate complicated and articulate technical issues in business terms. You must be a good audit leader, execute audits plans from beginning to end, often executing multiple audits concurrently. This position is based in our offices located in Bangalore India and may require up to 20%- 30% traveling within our offices located in India<br>
<br>
Job responsibilities<br>
<br>
1. Work across a wide variety of FinOps teams to assess internal controls though conducting internal audits and reviews.<br>
<br>
2. Track audit remediation actions, participate in FinOps service and operation team meetings to develop solutions, and report on the status.<br>
<br>
3. Interact with FinOps business to establish best practices.<br>
<br>
4. Conduct internal audits to proactively identify internal control deficiencies, root causes, and recommend improvements.<br>
<br>
5. Assist with providing internal control subject matter expertise for new policies, standard operating procedures, or tools being developed.</p><h2 class="jobSectionHeader"><b><br>
BASIC QUALIFICATIONS</b></h2><ul><li>Bachelor's degree, or MBA in computer science, engineering, analytics, mathematics, statistics, IT or equivalent</li><li>Experience in internal audit and risk management or equivalent</li><li>Knowledge of presentations and whiteboarding skills with a high degree of comfort speaking with internal and external executives, IT management, and developers</li></ul><h2 class="jobSectionHeader"><b>
PREFERRED QUALIFICATIONS</b></h2><ul><li>4+ years of information security and compliance experience, or Bachelor's degree in computer science, engineering, mathematics or equivalent</li><li>Experience in risk management and internal audit including: performing risk assessments and audits, designing controls, managing enterprise control frameworks, and prioritizing risk</li><li>Experience at Amazon, or experience in a fast-paced, high-tech company</li><li>Experience communicating technical details verbally and in writing</li><li>Experience with analytical tools and ability to dive deep into metrics and reporting</li><li>Experience in accounting management in Big Four with Fortune 500 clients, or experience delivering results for large, cross-functional initiatives/projects</li><li>CISSP, CISA, CISM or other security certification, or Associate's degree</li><li>Experience in audits related to business processes, risk mitigation, program compliance, or internal audits</li><li>Understanding of modern transaction processing environments is a plus</li></ul><br>
Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you&rsquo;re applying in isn&rsquo;t listed, please contact your Recruiting Partner.</div>

IT Audit Manager, Defensive Secuirty Team

ريناد المجد

<p>As a Cybersecurity Specialist, you will be the cornerstone of our project's security posture. You will be responsible for designing, implementing, and overseeing security measures to protect our digital assets, ensure compliance with national regulations, and embed security into every layer of the enterprise architecture.</p><p><b>Responsibilities</b></p><ul><li><b>Security Architecture &amp; Implementation:</b> Design, implement, and manage security controls and protocols within the enterprise architecture framework.</li><li><b>Compliance &amp; Governance:</b> Ensure strict adherence to all Saudi Arabian cybersecurity, safety, health, and environmental regulations. Lead efforts to achieve and maintain compliance with international standards.</li><li><b>Risk Management:</b> Conduct comprehensive risk assessments, vulnerability scans, and penetration testing. Develop and maintain a continuous risk mitigation strategy.</li><li><b>Incident Response:</b> Serve as a key player in the security incident response team, leading investigations and remediation efforts.</li><li><b>Policy Development:</b> Develop, maintain, and enforce cybersecurity policies, procedures, and standards.</li><li><b>Audit &amp; Assurance:</b> Prepare for and manage internal and external security audits, providing all necessary documentation and evidence.</li></ul><p><b>Qualifications</b></p><ul><li><b>Mandatory Requirements:</b></li><li>Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field.</li><li>A minimum of 5 years of professional experience in IT, with at least 3 years of specialized experience in cybersecurity.</li><li>Fluency in Arabic (both written and spoken) is a mandatory requirement for this role.</li><li>Must hold one or more of the following professional certifications:</li><li>CISSP (Certified Information Systems Security Professional)</li><li>CISM (Certified Information Security Manager)</li><li>CISA (Certified Information Systems Auditor)</li><li>ISO/IEC 27001 Lead Implementer or Lead Auditor</li></ul><p>the location in <b>Taif -Saudi Arabia</b></p><p>Job Type: Full-time</p><p>Pay: From &#65020;2.00 per month</p><p>Ability to commute/relocate:</p><ul><li>Taif: Reliably commute or planning to relocate before starting work (Preferred)</li></ul><p>Application Question(s):</p><ul><li>What is your notice period in days ?</li><li>Where do you live ?</li><li>What is your salary expectation ?</li><li>Are you Saudi Arabian ?</li></ul><p>Experience:</p><ul><li> cybersecurity: 3 years (Preferred)</li></ul>

Cyber Security Specialist

Deloitte

<div></div><div><div><div><div><div>Job requisition ID :: 92928
</div></div></div></div><div><div><div><div>Date: Nov 19, 2025
</div></div></div></div><div><div><div><div>Location: Bengaluru
</div></div></div></div><div><div><div><div>Designation: Assistant Manager
</div></div></div></div><div><div><div><div>Entity: Deloitte Touche Tohmatsu India LLP
</div></div></div></div><div><div><div><div><p>Assistant Manager | ISO:27001 | Bengaluru | Cyber Strategy &amp; Transformation</p><p>
Key Responsibilities:</p><ul><li>
Conduct risk assessments and gap analyses to evaluate the current state of clients' information security management systems against ISO 27001 standards.</li><li>
Assist in the design and implementation of ISMS in compliance with ISO 27001 frameworks.</li><li>
Collaborate with cross-functional teams to develop and document information security policies, procedures, and guidelines.</li><li>
Facilitate and lead ISO 27001 certification audits, ensuring that clients meet all necessary compliance requirements.</li><li>
Provide expert advice on information security best practices and technologies.</li><li>
Support clients in the development and delivery of cyber security awareness training programs.</li><li>
Monitor and evaluate compliance with established information security controls and recommend improvements as needed.</li><li>
Assist in incident response planning and execution, including the analysis of security incidents.</li><li>
Engage with stakeholders to effectively communicate security risks and compliance requirements.</li><li>
Stay current with industry trends, threats, and changes in regulatory standards.</li></ul><p>
Qualifications:</p><ul><li>
Bachelor&rsquo;s degree in Computer Science, Information Technology, Cyber Security, or a related field.</li><li>
At least 3-6 years of experience in cyber security, with a focus on ISO 27001 implementation and compliance.</li><li>
Relevant certifications such as ISO 27001 Lead Auditor, CISSP, CISM, or CISO are highly desirable.</li><li>
Strong knowledge of information security frameworks, governance, risk management, and compliance standards.</li><li>
Excellent analytical, problem-solving, and critical-thinking skills.</li><li>
Strong communication and interpersonal skills, with the ability to work effectively with clients and team members.</li><li>
Proficiency in developing detailed security documentation, reports, and presentations.</li><li>
Experience in conducting security assessments, audits, and vulnerability assessments.</li></ul></div></div></div></div></div><p></p>

Assistant Manager | ISO:27001 | Bengaluru | Cyber Strategy & Transformation

Search 10000+ Information security auditor jobs near you this November. New roles added regularly across leading industries. Apply today.