Senior Auditor IT Compliance

Senior Auditor IT Compliance

Miejsce pracy: Warszawa

Technologies we use

Operating system

• Windows

About the project

Join Simon-Kucher’s global IT organization as part of the IT Security, Compliance, Audit & Revision (SCAR) team and help strengthen the way we manage information security, compliance, and audit processes across our international business. In this role, you will contribute to a growing governance function that plays a key part in protecting our IT environment, supporting certification activities, and enabling secure, compliant operations worldwide. The SCAR team is expanding towards a target size of 15 professionals and is led by an experienced IT Security Manager and Director. The team is currently growing towards a target size of 15 professionals and is led by a dedicated IT Security Manager and Director. This role can be performed fully remotely within Poland.

This is how we organize our work

Team size

10

This is how we work

• in house
• you develop several projects simultaneously

Your responsibilities

• Audit Planning & Documentation: Plan audits by analyzing Information Security standards, including ISO 27001:2022 and TISAX, defining audit scope, maintaining relevant audit catalogues, and drafting audit plans within the assigned area of responsibility.
• IT, Security & Service Provider Audits: Perform audits in accordance with approved audit plans covering internal Simon-Kucher processes and assets, external service providers, IT systems, infrastructure, processes, and Information Security Management activities.
• Physical Security Audits: Conduct on-site or virtual audits of physical security controls, including occasional travel to Simon-Kucher offices worldwide.
• Audit Findings & Risk Management: Document and classify audit findings, enabling process owners, asset owners, and decision-makers to develop mitigation measures and implementation plans, while contributing to Simon-Kucher’s risk register and collaborating with IT Compliance colleagues and risk owners.
• Reporting & Stakeholder Collaboration: Report to the Director of the IT Compliance Group, contribute to audit reporting for the CTO, and collaborate with IT Compliance colleagues and relevant stakeholders throughout the audit process, including involvement in certification audits.

Our requirements

• Education: University degree or formal education in informatics, business informatics, IT security, or a related field.
• Professional Background: At least four to five years of experience in a similar role within an international organization and global corporate environment.
• Audit Qualifications: Relevant education, training, or professional development as an Auditor or Senior Auditor in Information Security, IT Security, or Cyber Security.
• Audit Standards Expertise: Practical experience auditing against ISO 2700x standards, BSI Grundschutz, SOC 2 Type II, TISAX or similar Information Security and Information Security Management frameworks.
• Audit Certifications: Certifications related to Information Security Auditing are considered a plus.
• Audit Planning & Execution: Experience in planning audits, defining audit scopes, selecting appropriate audit methodologies, leading auditees through the audit process, and estimating the effort required for audit preparation, execution, documentation, and reporting.
• Risk Management: Experience in risk management and familiarity with risk management terminology and methodologies.
• Communication & Stakeholder Management: Very good communication skills and the ability to guide stakeholders through the audit process in a clear and timely manner.
• Languages: Advanced proficiency in German and English (B1 level or higher).
• Organization & Self-Management: Strong initiative, self-starter mentality, analytical thinking, and solid organizational, time management, and result-driven working skills to operate effectively in a global environment.
• Professional Ethics: High ethical standards in auditing, including maintaining confidentiality, avoiding conflicts of interest, and conducting audits and reporting objectively and independently.

What we offer

• A stable employment contract (please note that we do not offer B2B contracts).
• Private medical insurance in the highest package fully paid by the employer (VIP Allianz).
• Multisport card fully financed by the employer.
• Annual bonus (dependent on the evaluation).
• Employee referral program.
• Remote work subsidy of €500 to start, then monthly bonus for utilities.
• International Travel Safety card.
• Access to LinkedIn Learning and Headspace.
• Employee Assistance Program (EAP).
• Microsoft Workplace Discount Program.
• Access to an online platform offering exclusive discounts and special offers from well-known brands.
• Birthday book for the employee.
• Internal Learning&Development Department with more than 5 000 different training courses.
• Our office is pet-friendly, so feel free to bring your furry friend to work and enjoy their company throughout the day!
• Extended Business Travel Option - opportunity to extend your business trips and stay a little longer to explore some of Europe’s most exciting cities.

Benefits

• private medical care
• sharing the costs of professional training & courses
• remote work opportunities
• flexible working time
• integration events
• mobile phone available for private use
• computer available for private use
• extra social benefits
• sharing the costs of tickets to the movies, theater
• holiday funds
• employee referral program

Recruitment stages

• Meeting with Recruiter
• Case study meeting
• Meeting with a Supervisor&Team

Please remember to submit your application in English.

Other applications will not be considered. The candidate should have an EU work permit, we do not offer visa for this position.

Simon-Kucher Core Business Services Sp. z o. o.

Simon-Kucher Core Business Services is one of international Simon-Kucher brand Office located in Warsaw. As a Shared Services Center, we provide end-to-end operational support to more than 42 Simon-Kucher offices globally, combining local expertise with international scope.

Established in Warsaw in 2023, our hub has been growing dynamically and currently employs over 100 professionals across HR, Finance, IT, Marketing, Data & AI, Legal, Market Research and Engine teams. By supporting a globally recognized consulting organization with a strong market position, we play a key role in enabling efficiency, scalability, and continued success. We foster a culture built on innovation, knowledge sharing, and continuous learning, making it an inspiring place for ambitious talent to grow and thrive.

Join us and be part of shaping the future of a fast-growing global center of excellence.

Klikając w przycisk „Aplikuj” lub w inny sposób wysyłając zgłoszenie rekrutacyjne, zgadzasz się na przetwarzanie Twoich danych osobowych przez SIMON-KUCHER CORE BUSINESS SERVICES sp. z o.o. z siedzibą w: Domaniewska 42, 02-672 Warszawa (Pracodawca), jako administratora danych osobowych w celu przeprowadzenia rekrutacji na stanowisko wskazane w ogłoszeniu.
Twoje dane osobowe będą przetwarzane w oparciu o następujące podstawy prawne: (a) aby podjąć działania na Twoje żądanie przed zawarciem umowy (np. informacje o oczekiwanym wynagrodzeniu i dostępności do rozpoczęcia pracy); (b) w oparciu o nasz prawnie uzasadniony interes (np. imię, nazwisko, data urodzenia, dane kontaktowe, wykształcenie, kwalifikacje zawodowe, przebieg dotychczasowego zatrudnienia); c) w oparciu o Twoją zgodę, która wyrażona jest poprzez przeslanie dokumentów aplikacyjnych zawierających takie informacje jak np. wizerunek czy zainteresowania. Podanie wszystkich danych osobowych, o których mowa powyżej jest dobrowolne, natomiast dane wymienione w lit. a) i b) są niezbędne do wzięcia udziału w rekrutacji. Niepodanie danych skutkuje brakiem możliwości rozpatrzenia kandydatury. Podanie pozostałych danych jest dobrowolne, ale może pomóc w sprawnym przeprowadzeniu procesu rekrutacji. Masz prawo żądać dostępu do Twoich danych (w tym uzyskania ich kopii), sprostowania danych, ich usunięcia, ograniczenia przetwarzania, przeniesienia, jak również wniesienia sprzeciwu wobec ich przetwarzania. Masz także prawo wniesienia skargi do Prezesa Urzędu Ochrony Danych Osobowych. Twoje dane osobowe mogą zostać przekazane dostawcom usługi publikacji ogłoszeń o pracę, dostawcom systemów do zarządzania rekrutacjami, dostawcom usług IT (hosting), dostawcom systemów informatycznych. Podane przez Ciebie dane osobowe nie będą wykorzystywane w celu profilowania albo podejmowania decyzji w sposób zautomatyzowany. Twoje dane osobowe będą przetwarzane przez okres maks. 1 roku od zakończenia publikacji ogłoszenia, chyba, że wyraziłeś odrębną zgodę na wykorzystanie Twoich danych osobowych w przyszłych rekrutacjach. W celu realizacji praw lub w przypadku jakichkolwiek pytań związanych z przetwarzaniem Twoich danych osobowych skontaktuj się z nami pod adresem: Wyświetl e-mail na pracuj.pl.