Are you passionate about cybersecurity, risk assessment, and security compliance?
At BMM, we are looking for a Security Auditor to join our growing team. In this role, you will assess Information Security Management Systems, evaluate compliance with industry-recognized security frameworks, and help our clients identify and mitigate security risks.
You will work alongside a global team of experts in a collaborative environment that values technical excellence, continuous learning, and high-quality service delivery.
As a Security Auditor, you will be responsible for ensuring the quality and accuracy of security audits and assessments. Your main responsibilities will include:
- Conducting security audits in accordance with BMM standards, methodologies, and procedures.
- Evaluating Information Security Management Systems and verifying compliance with established requirements.
- Assessing security controls, vulnerabilities, and risk exposure.
- Accurately documenting audit findings, test results, and security assessments.
- Preparing clear, detailed, and high-quality technical reports for clients and regulatory bodies.
- Identifying and communicating issues and findings effectively to stakeholders.
- Using security assessment and testing tools to perform audit activities.
- Managing audit projects, including planning activities, timelines, and resource requirements.
- Participating in training programs and continuous professional development initiatives.
- Staying current with security frameworks, industry standards, emerging threats, vulnerabilities, and best practices.
- Collaborating with clients and internal teams to ensure a clear understanding of findings and recommendations.
- Occasional travel as required for client engagements and audit projects.
We are looking for someone with strong critical thinking skills, attention to detail, and a quality-driven mindset, who can objectively evaluate risks and communicate technical conclusions in a clear and professional manner.
Requirements
- Technical education in Cybersecurity, Information Technology, Computer Science, or a related field (degree, vocational training, certification, or equivalent).
- Minimum of 1 year of experience as a Security Auditor or in a related security assessment role.
- Active CISA, CISM, CISSP, or SSCP certification.
- Knowledge of ISO 27000 standards, NIST SP 800 Series, and the NIST Cybersecurity Framework.
- Understanding of security risk assessment and control evaluation methodologies.
- Experience preparing technical documentation and audit reports.
- Excellent written and verbal communication skills.
- Strong project management and organizational skills.
- Professional proficiency in English.
It would be great if you also have…
- An ISO 27001 Lead Auditor certification.
- Experience working in regulated industries or interacting with regulatory bodies.
- Hands-on experience with security auditing and assessment tools.
- A strong interest in staying up to date with cybersecurity trends, threats, and emerging technologies.
- Experience working in international and multicultural environments.
What We Offer
- Permanent employment contract.
- Private health insurance.
- Flexible benefits program.
- Ongoing professional development and certification opportunities.
- Exposure to international projects and global clients.
- A highly specialized and innovative work environment.
- A collaborative team culture where knowledge sharing and continuous improvement are highly valued.
If you are passionate about cybersecurity, enjoy assessing risks, and want to help organizations strengthen their security posture, we would love to hear from you.
Apply now and help us build a safer and more secure digital future for our clients around the world.