Information Systems Auditor

We work in a hybrid mode 3+2, with a minimum of 3 days at the office (with mandatory Tuesdays and Wednesdays) and a maximum of 2 days at the home office.

The location of our office is Holandská 873/6, Brno – Štýřice, 639 00.

We employ only via an employment contract – full-time employment(HPP).

Role Summary

The GRC Information Systems Auditor supports and leads compliance assessments, control testing, continuous monitoring, regulatory compliance activities, and audit readiness. This role evaluates the design and operating effectiveness of controls, identifies gaps, coordinates remediation, and helps ensure that compliance obligations are translated into sustainable operational practices.

Key Responsibilities

• Lead audit activities for SOC 2, ISO 27001 and other compliance frameworks as required by business including planning, control mapping, evidence coordination, walkthroughs, testing support, request management, issue tracking, and remediation follow-up.
• Support PCI compliance activities, including requirements mapping, evidence collection, control validation, assessment coordination, and tracking of corrective actions.
• Perform continuous monitoring of control activities, compliance obligations, risk indicators, audit evidence, exceptions, and remediation plans.
• Support regulatory compliance activities by monitoring applicable requirements, assessing organizational impact, coordinating control or process updates, and maintaining compliance documentation.
• Lead SDLC audits by evaluating software development lifecycle processes, secure development practices, change management, access controls, testing, release management, and related evidence.
• Conduct control assessments, interviews, walkthroughs, and evidence reviews to determine whether controls are appropriately designed and operating as expected.
• Document audit procedures, test results, observations, risks, exceptions, and recommended remediation actions.
• Partner with control owners to develop practical remediation plans and monitor action completion.
• Maintain accurate compliance records, control narratives, process documentation, and audit support materials.
• Prepare status reports, dashboards, and management updates related to assessments, findings, risks, and remediation.
• Identify recurring control issues and recommend improvements to strengthen compliance and reduce manual effort.
• Perform other GRC tasks as needed.

Qualifications and Experience

• Bachelor’s degree in cybersecurity, information systems, accounting, business, or a related field; equivalent experience may be considered.
• Experience in IT audit, compliance, risk management, internal controls, or information security assurance.
• Knowledge of SOC 2, PCI DSS, ISO27001 frameworks and continuous monitoring, regulatory compliance, and software development lifecycle controls.
• Experience performing control testing, evidence evaluation, audit interviews, and issue remediation tracking.
• Ability to interpret control requirements and assess how they are implemented in operational processes and technology environments.
• Strong attention to detail and ability to maintain accurate, well-organized audit documentation.
• Relevant certifications such as CISA, CIA, Security+, CGRC, or equivalent are preferred.
• Core Competencies
• Audit planning and execution
• Control testing and evidence evaluation
• Compliance analysis
• Issue identification and remediation tracking
• Documentation and recordkeeping
• Analytical thinking
• Cross-functional collaboration

Our benefits:

• 25 days of vacation per year
• 3 sick days per year
• 10 study days per year
• 2 volunteering days per year
• 4 weeks’ holidays after 5-year tenure, Sabbatical Leave
• Up to 48 300CZK personal education budget per year
• Pension or life insurance matching donation up to 3% of the salary or 4000 CZK per month
• Cash allowance for meals of 95 CZK per working day
• Unlimited access to LinkedIn Learning
• English/Czech classes
• Multisport card
• Solarian Referral Program
• SolarWinds Appreciation Program
• Giving – Donation Matching
• Employee Assistance
• Competitive Race Reimbursement
• Breakfast on Wednesdays
• Fresh fruits and snacks on Mondays