Information Security Auditor

Role Overview

XM is seeking an experienced Information Security Auditor to join their fast-growing Information Security team. This hybrid role focuses on assessing and improving security controls across IT infrastructure, applications, and third-party systems in a dynamic environment.

Key Responsibilities

• Conduct complex security audits of IT infrastructure, applications, technologies, and third-party systems

• Assess internal controls, processes, and policies to identify deficiencies and develop remediation strategies

• Prepare comprehensive audit reports detailing scope, findings, and corrective action recommendations

• Identify information security risks and propose practical, cost-effective solutions

• Monitor and manage remediation progress on audit findings

• Ensure compliance with applicable information security laws and regulations

• Coordinate with external auditors and internal stakeholders on compliance audits

• Provide regular security posture reports and metrics to stakeholders

Requirements

• BSc/MSc in Information Security or related field

• Minimum 2 years of Information Security experience

• Hands-on experience in IT systems and security audits, vulnerability assessments, and risk management

• Demonstrated expertise auditing large-scale infrastructures and advanced security controls

• Knowledge of Windows, Active Directory, Linux, virtualization, firewalls, and networking

• Understanding of ISO 27001, NIST CSF, GDPR, and DORA frameworks

• Strong project management and analytical problem-solving abilities

• Excellent communication skills with ability to explain technical concepts to non-technical audiences

Cloud infrastructure auditing experience (AWS, Azure, GCP) and security certifications (CISA, ISO 27001 Lead Auditor, CISSP, CCSP) are advantageous.