> Markdown version of [/jobs/ext/3252995-senior-it-auditor](https://www.wearedevelopers.com/jobs/ext/3252995-senior-it-auditor). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior IT Auditor - **Company:** Ferrovial - **Location:** Madrid, Spain - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Amazon Web Services, Microsoft Azure, Cloud Computing Security, Information Systems, Identity and Access Management, Information Technology Audit, Python (Programming Language), Windows PowerShell, Productivity Software, Power BI, Kusto Query Language, Security Information and Event Management, SQL Databases, Software Vulnerability Management, Scripting, Microsoft Power Automate, Office365, Large Language Models, Information Technology, Tools for Reporting, CIS Benchmarks, GPT - **Published:** September 23, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=3c6cdc9d7b151330 ## About the Role * Degree in Computer Science, Telecommunications Engineering or a related technical field. * 4-5 years of experience in external audit or consulting, or at least 3 years in internal audit or an IT/Information Systems function. * Knowledge of key cybersecurity frameworks and regulations, including NIST CSF 2.0, ISO 27001, CIS Controls, NIS2, ENS and GDPR. * Hands-on technical expertise across cybersecurity and data protection/privacy domains, including the areas outlined in the role responsibilities. * Ability to assess gaps between best practices, regulatory requirements and internal policies, and translate them into practical control improvements. * Strong analytical mindset and experience working with data and audit analytics tools such as IDEA, ACL or Power BI. * Fluent business English, both written and spoken. * Reliable, structured and self-organised, with strong analytical judgement and decision-making skills. * Excellent communication and advisory skills, with the ability to adapt complex messages to different audiences and seniority levels. * Flexible and collaborative approach, with the ability to adapt to changing priorities, scenarios and deadlines. Availability to travel up to 30% of the year. * Desirable / Highly Valued * Professional certifications such as CISA, ISO 27001, ISO 22301 or cloud security certifications will be highly valued. * Specialised training in cybersecurity, data protection or information systems governance will be considered a plus. * Practical experience using Artificial Intelligence and Large Language Models - including tools such as Claude, Copilot, ChatGPT and Gemini - to enhance audit efficiency, automate routine tasks and support smarter, data-driven decision-making. * Scripting and querying skills - Python, PowerShell, SQL or KQL - applied to audit testing, continuous auditing and automation of repetitive activities. Experience auditing in multinational environments, working across different geographies, stakeholders and regulatory frameworks. * Seize the challenge. Move the world together! Innovative, creative, respectful, and diverse are some of the ways we describe ourselves. We are motivated by challenges, and we collaborate across our business units to move the world together. Your journey to a fulfilling career starts here! ## Description * Compelling benefits and employee wellbeing : Enjoy a comprehensive benefits package that rewards your hard work and dedication and take advantage of initiatives designed to support your physical and psychological health. * Productivity tools : Utilize cutting-edge tools like Microsoft Copilot to enhance your productivity and efficiency., The successful candidate will join Ferrovial Internal Audit, located in Madrid. He/she will enjoy a double reporting line to the Audit Manager and the Head of IT Audit located in Madrid., * Take part in the planning of internal audits and in their execution, contributing to the establishment of added value action plans. * Plan and execute technical cybersecurity audits across key domains: IAM, network and cloud security (Azure, AWS, M365), endpoint protection, vulnerability management, SIEM/SOC and cyber resilience. * Support data protection and privacy audits when required, covering governance, classification, retention, DPIA, data subject rights and technical controls (encryption, DLP). * Gather and analyze evidence, document findings and discuss recommendations with auditees at the appropriate level. Communicate and discuss conclusions and recommendations with auditees, adapting the message to the audience and hierarchical level. * ## Related Videos - [Livecoding with AI](https://www.wearedevelopers.com/videos/1201-livecoding-with-ai) - [Beyond Dashboards: Fixing Text-to-SQL with Semantic RAG](https://www.wearedevelopers.com/videos/2036-beyond-dashboards-fixing-text-to-sql-with-semantic-rag) - [Unlocking the potential of Digital & IT at Vodafone](https://www.wearedevelopers.com/videos/602-unlocking-the-potential-of-digital-it-at-vodafone) - [ Evaluating AI models for code comprehension](https://www.wearedevelopers.com/videos/1462-evaluating-ai-models-for-code-comprehension) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [REST, GraphQL, gRPC, and more: A comparison of modern API styles](https://www.wearedevelopers.com/videos/100247-rest-graphql-grpc-and-more-a-comparison-of-modern-api-styles) ## Related Articles - [Spanish Business Culture and Etiquette](https://www.wearedevelopers.com/magazine/353-spanish-business-culture-and-etiquette) - [Coffee with Developers - Maria Apazoglou - Making AI understandable for all in production](https://www.wearedevelopers.com/magazine/475-coffee-with-developers-maria-apazoglou-making-ai-understandable-for-all-in-production) - [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)