Overview In this role you perform cyber security, IT and privacy audits across SITA's general procedures, processes, and sites. You'll prepare factual reports that inform management of risk areas and issues. You work with cross-functional teams to evaluate security controls and governance, driving remediation and assurance across the organization. This is a chance to contribute to risk management at scale within a globally connected aviation ecosystem.

Compensaciones / Beneficios Flex Week: work from home up to 2 days/week

Flex Day: flexible work arrangements

Flex-Location: up to 30 days/year location flexibility

Employee Wellbeing programs (EAP, Champion Health)

Professional Development and learning platforms

Competitive benefits

Responsabilidades Plan and execute end-to-end cyber security, IT and privacy audits (planning, fieldwork, testing, reporting)

Apply data-driven and technical audit techniques (configuration reviews, log analysis, vulnerability assessments)

Assess design, implementation and operating effectiveness of cybersecurity, IT and privacy controls

Evaluate alignment with frameworks and standards (NIST CSF, ISO 27001, CIS, COBIT,



GDPR, NIS2)

Identify control gaps and root causes; assess remediation plans

Ensure compliance with internal policies, regulatory and contractual cyber requirements

Provide assurance over third-party and supply-chain cyber risk management

Present audit results to senior management and EMT; track remediation actions with follow-up testing

Requisitos principales 3 years of external/internal cyber, IT, and privacy auditing experience

Experience performing end-to-end audits independently

Strong understanding of cybersecurity and IT controls

Experience with technical audit techniques

Familiarity with ISO 27001, NIST, CIS, COBIT, GDPR, NIS2

Audit environment background

Effective communication with senior stakeholders effective communication with senior stakeholders technical audit techniques (configuration reviews, log analysis, vulnerability assessment)

Identity & access management (IAM)

Network and infrastructure security

Cloud security

Application security and SDLC

📌 Senior Cyber Security Internal Auditor (Barcelona)
🏢 Sita - Société Internationale De Télécommunications
📍 Barcelona