GRC Analyst supporting ISO27001 certification preparation at Asiera. Collaborating with technical teams for documentation and compliance.
EZ
Hybrid IT Compliance, Audit Specialist
Posted 4 months ago
About the role
- IT-Compliance/Audit Specialist overseeing IT security documentation and audits compliance in Germany. Responsible for collaboration with auditors and ensuring information security measures are in place.
Responsibilities
- Creation and development of documentation in the field of IT/information security
- Preparation for and support during audits (e.g. ISO 27001, BSI IT-Grundschutz)
- Coordination and implementation of measures following reviews by internal audit, external auditors or auditors
- Support of the Information Security Officer (ISO) in ICT risk control functions
- Handling and monitoring of information security measures
- Maintenance of information security policies and regulations
- Collaboration at the interface between IT and internal/external auditors
Requirements
- Completed university degree in an IT-related field or vocational training as an IT specialist (Fachinformatik)
- Knowledge in information security management and data protection, business continuity management / emergency management
- Methodical skills in audit preparation, documentation, process analysis and risk management
- Further training/certifications in areas such as ISO/IEC 27001, VAIT, DORA or CISA
- Practical experience in executing IT projects with a compliance focus is an advantage
- Knowledge and experience in the practical implementation of IT security standards is an advantage
- Willingness to participate in internal or external audits as well as to document and implement audit findings
- Ideally at least three years of practical experience in information technology
- Strong communication and information skills, excellent presentation abilities, ability to collaborate and think systemically
Benefits
- Challenging and varied tasks with scope for initiative in a positive work environment
- Flexible working hours and opportunities for mobile/home working
- Attractive vacation policy
- Performance-based compensation in accordance with the Church Service Employment Regulations (KDO)
- Employer-funded pension scheme
- Social benefits such as the '9 €-ticket' from EZVK for public transport
- Financial support for employees with children or caregiving responsibilities
- Individual and professional development through internal and external training and qualification programs
- Subsidized canteen and complimentary beverages (mineral water, coffee and tea)
- Fresh fruit and ice cream
- Access to gym, pool or yoga with attractive rates via EGYM Wellpass
- Discounts at top brands via corporate benefits
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
Location requirements
Cyber GRC Senior Consultant supporting companies in enhancing cybersecurity and compliance. Collaborating with client teams to implement cybersecurity policies and conduct risk assessments.
Internal Controls & Compliance Supervisor managing compliance with SOX and internal controls at Solventum, a healthcare company enhancing solutions for healthcare professionals.
Regulatory Affairs Specialist ensuring compliance and strategic oversight at Multiverse. Drafting regulatory submissions and coordinating oversight processes within a hybrid work environment.
Director of Deposit Compliance responsible for leading compliance efforts for deposit products at Northwest Bank. Ensuring adherence to regulations and managing risk assessment processes for effective compliance operations.
Chargé de la Qualité et Conformité en alternance pour Economie d’Energie. Soutenir la conformité et le contrôle interne tout en participant à la transition énergétique en France.
Senior Specialist responsible for corrective actions in Global Trade Compliance at L3Harris. Track compliance incidents and facilitate corrective action processes across US and non - US jurisdictions.
Regulatory Affair Specialist at Capgemini Engineering ensuring regulatory compliance with medical device documentation. Supporting regulatory activities and monitoring the regulatory context impact on site processes.
Compliance Analyst role at Leve Saúde ensuring adherence to regulations in the health sector. Responsibilities include audits, policy management, and due diligence processes.
Governance, Risk & Compliance Specialist at Quilter providing oversight on governance, risk, and compliance activities, strengthening Quilter Invest’s risk management culture across the organization.