XM

Global forex and CFD broker

Information Security Auditor

Security Governance, Risk & ComplianceUpdated on Nov 10

Full-timeHybrid

About the Job

Requirements

A BSc or MSc in Information Security or another related field is required.
At least two years of work experience in an Information Security-related field is required.
Experience in IT systems and security audits, vulnerability assessments, and security risk management is required.
Demonstrated experience auditing large-scale infrastructures, information systems, IT processes, and advanced security controls is required.
Knowledge of information and security technologies, including Windows, Active Directory, Linux, virtualization, host and application security, networking, firewalls, and security architecture, is required.
A good understanding of security regulations and frameworks, including ISO 27001, NIST CSF, NIST 800-53, GDPR, and DORA, is required.
Strong project and time management skills and the ability to work independently under minimal supervision and as part of a team are required.
Meticulous attention to detail, an analytical mindset, and problem-solving skills are required.
Communication skills sufficient to explain technical concepts to a non-technical audience are required.

Responsibilities

Perform complex hands-on security audits of IT infrastructure, applications, technologies, and third parties.
Assess internal controls, processes, and policies related to information technology and security, identify deficiencies, and develop remediation strategies.
Prepare comprehensive audit reports summarizing scope, test-work results, findings, and recommended corrective actions.
Identify information security risks and make practical, appropriate, and cost-effective recommendations.
Manage and monitor progress on remediation steps for audit findings.
Ensure the organization meets information security requirements under applicable laws and regulations.
Liaise with external auditors and internal stakeholders to execute compliance audits successfully.
Provide regular reports and metrics on the security posture to relevant stakeholders.

Desired Qualifications

Hands-on experience auditing cloud infrastructures such as AWS, Azure, or GCP is advantageous.
Audit-related and other information security certifications such as CISA, ISO 27001 Lead Auditor, CISSP, or CCSP are advantageous.

The Role:

We are looking for an experienced, passionate and self-motivated professional to join our fast-growing Information Security team. As part of our Information Security Audit Program, you will have the opportunity to assess and improve security controls across a dynamic and fast-paced environment. You will work with cutting-edge technologies and talented professionals, gaining hands-on experience in security assessments, compliance audits, and risk management.

The main responsibilities of the position include:

Perform hands-on complex security audits in IT infrastructure, applications, technologies and third parties
Assess internal controls, processes and policies related to Information Technology and Security identifying deficiencies, and developing remediation strategies
Prepare comprehensive audit reports summarizing the audit scope, results of test work, findings and recommend corrective actions
Identify information security risks and make recommendations which are appropriate, practical and cost-effective
Manage and monitor the progress of remediation steps on audit findings
Ensure the organization meets all information security requirements of applicable laws and regulations
Liaise with external auditors and internal stakeholders in successful execution of all compliance audits
Provide regular reports and metrics on the security posture to the relevant stakeholders

Main requirements:

BSc/MSc in Information Security or any other related field
Minimum 2 years working experience in an Information Security related field
Experience in IT Systems and Security audit, vulnerability assessments and security risk management
Demonstrated experience in auditing large scale infrastructures, information systems, IT processes and advanced security controls
Good knowledge of information and security technologies such as Windows and Active Directory, Linux, virtualization, host and application security, networking, firewalls, security architecture etc
Hands-on experience in auditing cloud infrastructures (AWS, Azure, GCP etc) will be considered an advantage
Good understanding of security regulations and frameworks such as ISO 27001, NIST CSF and 800-53, GDPR, DORA etc
Strong project and time management skills with the ability to work independently under minimal supervision and as part of a team
Meticulous attention to detail with an analytical mind and outstanding problem-solving skills
Excellent communication skills with the ability to explain technical concepts to a non-technical audience
Audit-related and other information security certifications such as CISA, ISO 27001 Lead Auditor, CISSP, CCSP etc will be considered an advantage

Benefit from:

Attractive remuneration package plus performance related reward
Private health insurance
Corporate pension fund
Intellectually stimulating work environment
Continuous personal development and international training opportunities

The Hiring Experience: What Awaits You

Let’s Connect – Intro Chat with Talent Acquisition
Deep Dive – First Interview with Your Future Team
Final Connection – Final Interview

All applications will be treated with strict confidentiality!

By submitting this application, I confirm that I have read and agree to the terms of the Privacy and Data Protection Notice and the Confidentiality Undertaking.

About the Company

XM

Global forex and CFD broker

XM is a forex and CFD broker that helps people trade currencies and other financial instruments online. It operates a trading platform where clients can buy and sell currencies and CFDs through account holders in multiple languages. The product works through a global team and offices; clients access markets via XM’s platform and tools, with support and services offered in over 30 languages. XM differentiates itself by its culture and people-focused approach: a large workforce (over 1,700 professionals across seven offices) and an emphasis on its values Big. Fair. Human., with programs for learning, wellbeing, diversity and inclusion, and flexible work arrangements. The company aims to be a leading global fintech provider by delivering reliable service, ongoing development for users and staff, and a strong focus on customer and employee wellbeing.

Company size: 1,001-5,000
Company stage: Not listed
Total funding: Not listed
Headquarters: Limassol Municipality, Cyprus
Founded: 2009

Recently Posted Jobs

Explore more opportunities at XM

See more jobs