Information Security Auditor


Job Description:

Job Purpose:

Carry out the audit work on all licensed trust services providers (TSPs).

Accountabilities:

Conduct on-site and online audit on all TSPs and their registration offices.

Ensure that all TSPs adhere to the terms and conditions of license contract.

Conduct thorough reviews of security policies, procedures, and technical controls.

Identify and evaluate potential security risks and vulnerabilities and provide recommendations for risk mitigation.

Collaborate with cross-functional teams to assess the impact of identified risks on business operations.

Stay current with emerging security threats and technologies to enhance adopted audit methodologies.

Report accurate information about all audit types and findings/recommendations status.

Education:

Bachelor degree of Engineering or Computer science or equivalent

Certified for ISO27001 auditor is a plus.

Required Experience:

2 years of relevant audit experience.

Full proficiency in different audit and reporting techniques.

Ability to create clear and detailed audit and statistical reports.

Required Skills:

Excellent command of English.

Excellent communication and presentation skills.

Proficient in using industry-standard audit tools and methodologies.

Strong technical background in information security best practices.