Senior Auditor IT Compliance (m/f/d)
In German - Berlin | Bonn | Cologne | Frankfurt/Main | Hamburg | Munich
Are you looking for an opportunity in a fast-growing, global IT team where collaboration, innovation, and a stakeholder-centric approach are priority? As part of Simon-Kucher, our IT works globally as a trusted partner in the company’s journey toward success and navigates the ever-changing technological landscape. As Senior Auditor IT Compliance you play a crucial role in the planning and documentation as well as the execution and coordination of IT audit management and actively shape our employee’s work environment. Apply and support growth as a member of our global IT team!
What makes us special:
1. Advance your career with exciting professional opportunities in our thriving company with a startup feel
2. Voice your unique ideas in a corporate culture defined by our entrepreneurial spirit, openness, and integrity
3. Feel at home working with our helpful, enthusiastic colleagues who have great team spirit
4. Broaden your perspective with our extensive training curriculum and learning programs (e.g. LinkedIn Learning)
5. Speak your mind in our holistic feedback and development processes (e.g. 360-degree feedback)
6. Enjoy our benefits, such as hybrid working, daycare allowance, corporate discounts, and wellbeing support (e.g. Headspace)
7. Unwind in our break areas where you can help yourself to the healthy snacks and beverages provided
8. See another side of your coworkers at our frequent employee events and highly anticipated World Meeting and Holiday Party
How you will create an impact:
9. You plan audits by analyzing Information Security Standards, such as ISO 27001:2022, and define audit scopes within your area of expertise.
10. You create and maintain structured audit catalogues tailored to the identified scope.
11. You draft audit plans for your assigned audit areas.
12. You perform audits in line with the approved audit plan, covering both internal processes and assets as well as audits of external service providers.
13. You assess a broad range of audit topics, including IT systems, infrastructure and processes, information security management processes, and on-premise or virtual audits of physical security.
14. You document findings clearly and thoroughly to enable process and asset owners to identify and develop mitigation measures and implementation plans.
15. You contribute to the risk register through the clear classification and documentation of audit findings and collaborate with IT compliance and risk stakeholders.
16. You report audit results to the CTO.
17. You are involved in certification audits.
18. You support client assessments by providing information or take part in client meetings.
About you:
19. You hold a university degree or formal education in informatics, business informatics, IT security, or a similar field.
20. You are trained or have developed yourself into an Auditor or Senior Auditor for information security or IT/cybersecurity.
21. You have at least 4–5 years of experience in similar audit roles within international organizations.
22. You have hands-on experience with auditing of either ISO 2700x standards, BSI Grundschutz, SOC 2 Type II, or similar standards covering information security and information security management.
23. Certifications concerning information security auditing are a plus.
24. You are experienced in audit planning, including scope definition, method selection, guidance of the auditees through the audit process, and realistic estimation of time and efforts.
25. You are familiar with risk management terminology and methodologies.
26. You demonstrate strong analytical thinking, self-motivation, and a structured, results-oriented approach to your work.
27. You have very good communication skills and are fluent in both German and English (minimum B1 level).
28. You uphold the highest ethical standards in auditing, ensuring objectivity, confidentiality, and independence at every stage of the process.