Information Security Auditor 5439

A leading, large-scale financial institution is looking for a skilled and motivated Information Security Auditor to join our elite cyber security team. In this role, you will be a key player in conducting comprehensive risk assessments, identifying vulnerabilities, and ensuring our technological frontier remains resilient against evolving threats.

If you thrive in dynamic environments and want to work within a cutting-edge Purple Team model, this is the place for you!

Key Responsibilities

• Risk & Security Assessments: Conduct thorough security assessments for enterprise systems, covering both infrastructure and application layers.
• Vulnerability Management: Identify weaknesses in existing production systems as well as systems within the deployment pipeline.
• Hardening Reviews: Review system configurations and hardening levels against industry-accepted benchmarks and best practices.
• Compliance & Regulation: Perform regulatory checks aligned with strict financial sector requirements.
• Control Evaluation: Assess the design and effectiveness of existing compensating controls.
• Mitigation & Remediation: Provide actionable recommendations for vulnerability mitigation and collaborate closely with professional tech teams to ensure effective remediation.
• Purple Team Collaboration: Work within a collaborative, professional Purple Team setup to bridge the gap between offensive testing and defensive posture.

Professional Requirements (Must-Have)

• Security Assessment Experience: Proven track record in infrastructure and application-level security assessments, including generating detailed post-assessment reports and technical recommendations (On-Premises / Azure / AWS / Linux).
• Hands-on Penetration Testing: Solid experience in pentesting across diverse environments—platforms, servers, applications, and mobile (On-Premises / Azure / AWS / Linux).
• Deep Technical Expertise: In-depth understanding of cyber security technologies, vulnerability scanning tools, network protocols, attack vectors, and pentesting methodologies.
• Systemic Vision: Ability to analyze complex enterprise-wide environments and understand the broader business impact of security risks.
• Standards & Compliance: Deep knowledge of financial sector regulations and global frameworks, including ISO 27001, NIST, PCI-DSS, and GDPR.
• Enterprise Experience: Prior experience working within large, technologically complex, and highly regulated organizations.
• Professional Certifications: Recognized industry certifications such as CISSP, CEH, OSCP, or equivalent.

#CyberSecurity #JobOpening #InformationSecurity #PenetrationTesting #PurpleTeam #FinTech #CloudSecurity #Hiring