> Markdown version of [/jobs/ext/1431237-it-auditor](https://www.wearedevelopers.com/jobs/ext/1431237-it-auditor). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# IT Auditor

- **Company:** Zoi
- **Location:** Figueres, Spain (Remote available)
- **Contract:** Permanent contract
- **Skills:** Cloud Computing, Control Objectives for Information and Related Technology (COBIT), Cyber Security, Information Systems, Data Governance, Information Technology Audit, IT Management, Data Streaming, Systems Architecture, IT General Controls (ITGC), Information Technology
- **Published:** July 25, 2026
- **Apply:** https://es.indeed.com/viewjob?jk=3bf4fd957438d5b6

## About the Role

* Professional Experience: min. of 3-5+ years of hands-on experience in IT auditing, IT risk management, or IT security. Experience within a Big 4 firm or an international mid-cap industrial company would be a plus.
 * Educational Background: University degree in Business Informatics, Computer Science, or Business Administration/Economics with a dedicated specialization in Information Systems or IT Management.
 * Framework Expertise: Strong practical knowledge of standard IT frameworks and standards such as COBIT, ITIL, ISO/IEC 27001, and NIS2.
 * Certifications: CISA certification is highly desirable/mandatory; additional certifications like CRISC, CISM, or CISSP are a strong advantage.
 * Language Skills: Professional proficiency in English (C1) and German (B2).
 * Analytical & Autonomous Mindset: Excellent ability to analyze complex IT environments, system architectures, and data flows, combined with a self-reliant, meticulous, and quality-driven working style.
 * Pragmatic Problem-Solver: Solution-oriented approach to developing secure, actionable, and compliant recommendations for the business.

## Description

* Lead Global Audits: Plan, conduct, and lead comprehensive IT audits-including ITGC, IT application controls, ISO/IEC 27001, cybersecurity, cloud infrastructure, and data governance-across global locations onsite and remote.
 * Evaluate & Improve Risks: Support IT management and functional departments in assessing IT-related risks and vulnerabilities while implementing secure, effective process improvements.
 * Report & Align Findings: Deliver thorough IT audit reports and directly align critical technical findings, security risks, and corrective actions with IT leadership and executive management.
 * Build Audit Strategy: Develop and mature the overarching IT Audit function in close collaboration with the Head of Internal Audit.
 * Foster Sustainable Improvement: Establish a culture of continuous compliance by managing a structured follow-up process for all audit and security recommendations.
 * Innovate Audit Processes: Drive the audit function forward by leveraging modern IT audit tools, automated auditing techniques, continuous monitoring, and advanced data analytics.
 * Global Collaboration: Work within international group structures with a willingness to travel internationally (approx. 30%, planned and coordinated in advance).


## Related Videos

- [The Future of Recruiting: Innovations and Challenges in the European IT Sector](https://www.wearedevelopers.com/videos/1056-the-future-of-recruiting-innovations-and-challenges-in-the-european-it-sector)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Python-Based Data Streaming Pipelines Within Minutes](https://www.wearedevelopers.com/videos/1233-python-based-data-streaming-pipelines-within-minutes)
- [Your Manager Doesn’t Come with a User Manual (But You Can Totally Write One)](https://www.wearedevelopers.com/videos/1495-your-manager-doesn-t-come-with-a-user-manual-but-you-can-totally-write-one)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)

## Related Articles

- [IT Salaries in Germany](https://www.wearedevelopers.com/magazine/287-it-salaries-in-germany)
- [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)
- [Finding IT & Technology English-speaking Jobs in Germany ](https://www.wearedevelopers.com/magazine/446-finding-it-technology-english-speaking-jobs-in-germany)
- [IT Salaries in Austria](https://www.wearedevelopers.com/magazine/286-it-salaries-in-austria)
- [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)
- [System change: restart as developer?](https://www.wearedevelopers.com/magazine/39-system-change-restart-as-developer)