Security Auditor

To look at the present and past activities to provide assurance that all activities have been carried out according to set policies and procedures. Security Auditors create value to SSL.com by assessing its adherence to the applicable requirements, identifying possible discrepancies or areas for improvement, analyzing root causes behind facts, and making recommendations. Their stabilizing role is also valuable for the security, reliability, and quality of the SSL.com products and services, thus for customers and relying parties.

• Verbal and written fluency in English.

• Ability to read, interpret and comprehend complex documents such as contracts, standards, policies, processes, and procedures.

• Experience in methodologies, concepts and tools to audit IT systems and information security management systems.
• Objectivity, sound judgment and fair assessment/decision making.
• Attention to the details and nuances of policies, standards and processes.
• Commitment to tasks, persistence in overcoming obstacles and dependability in difficult circumstances to get results.

• Good human and communications skills to collect the information required, engage subject matter experts, and drive the audit process.

• Analytical ability to identify the different aspects of each issue, deepen the analysis in critical areas, and extract essential information and conclusions.
• Proficient working knowledge of information technology concepts, practices, terminology, and standards, with ability to actively conduct and/or engage in discussions relative to all assignments. This also includes demonstrated ability to document technical matters and/or or complex concepts in a manner that is meaningful to the intended recipients.
• Knowledge of PKI concepts, Trust Services, Certification Authorities and/or Root Store Programs a plus.

Education requirements and work experience include:

• Bachelor’s Degree in Information Technology, Computer Science, or an equal amount of experience in the related field.?
• Two or more years of business experience in Information Security /IT auditing.

Nice to have (preferred):

• Certification such as Webtrust Auditor, ETSI Auditor, CISA, CCAK, ISO 27001 Lead Auditor
• Any relevant licenses and/or certificates?(e.g., CISSP, COBIT, ITIL, CDPSE)

SSL.com provides an equal opportunity for employment across the globe. We welcome diversity and create an inclusive environment that protects employees from any discrimination in our amazing company.?