The posting
Finance Business Support Auditor Information Security 16-10-2026 Marktconform Medior, Senior Arnhem Als Auditor Information Security bij DEKRA toets je organisaties op informatiebeveiliging en privacy: je bereidt audits voor, interviewt directie en medewerkers, voert remote en internationale audits uit, rapporteert bevindingen en adviseert over verbeterpunten. Direct solliciteren Neem contact op Automatisch verbeterd voor betere leesbaarheid Auditor Information Security Role purpose: Evaluate and improve an organization's information security posture by planning and executing audits, validating controls, and ensuring compliance with internal standards and external regulations. Key responsibilities - Plan, scope, and conduct information security audits across systems, applications, networks, and third parties. - Assess the design and operating effectiveness of security controls (e.g., IAM, vulnerability management, logging/monitoring, incident response, backup, encryption). - Map evidence to frameworks and requirements such as ISO 27001, NIST, SOC 2, PCI DSS, GDPR, and local regulatory standards as applicable. - Document findings, risk ratings, and remediation recommendations in clear audit reports. - Track corrective actions, validate remediation, and report status to stakeholders. - Collaborate with IT, security, and business teams to improve governance, risk management, and control maturity. Required skills and qualifications - Experience in information security auditing, risk assessment, or IT controls testing. - Knowledge of security frameworks, control testing methods, and audit evidence collection. - Ability to interpret technical configurations, system logs, and security tooling outputs. - Strong report writing, stakeholder communication, and prioritization skills. - Relevant certifications preferred: CISA, CISSP, ISO 27001 Lead Auditor, or equivalent. Success measures - Accurate risk identification, action...



