Experteer Overview
Join Ferrovial Internal Audit in Madrid to lead and support cybersecurity and data protection audits. You will assess controls across IAM, cloud, network, and data privacy, translating findings into practical improvements. Collaborate with auditees and adapt messages to audiences, while traveling up to 30% for cross‑border activities. This role blends technical security expertise with audit mindset to strengthen governance across global units.

Compensaciones / Beneficios
• Assist in planning internal audits and develop value-added action plans
• Plan and execute technical cybersecurity audits across IAM, network, cloud (Azure, AWS, M365), endpoint protection, vulnerability management, SIEM/SOC, and cyber resilience
• Support data protection and privacy audits (DPIA, data subject rights, encryption, DLP)
• Gather and analyze evidence, document findings, and discuss recommendations with auditees
• Communicate conclusions and adapt messages to different audiences and levels of seniority
• Assess gaps between best practices, regulatory requirements and internal policies and translate into practical controls
• Utilize data/audit analytics tools to support testing and insights
• Maintain fluent English communications and collaborate with cross-functional teams




• Travel up to 30% of the year for audits and stakeholder engagement
• Maintain professional and ethical standards aligned with Ferrovial’s Internal Audit function

Responsabilidades
• Degree in Computer Science or Telecommunications Engineering or related technical field
• 4-5 years in external audit/consulting or at least 3 years in internal audit or IT/IS function
• Knowledge of cybersecurity frameworks and regulations (NIST CSF 2.0, ISO 27001, CIS Controls, NIS2, ENS, GDPR)
• Hands-on technical expertise in cybersecurity and data protection domains
• Ability to assess gaps and translate into practical control improvements
• Analytical mindset with experience in audit analytics tools (IDEA, ACL, Power BI)
• Fluent business English (written and spoken)
• Reliable, structured, self-organised with strong analytical judgement
• Excellent communication and advisory skills for diverse audiences
• Versátil, collaborative, adaptable to changing priorities and deadlines
• Availability to travel up to 30%

Requisitos principales
• comprehensive benefits package
• employee wellbeing initiatives
• global and cross-business unit mobility
• productivity tools (Microsoft Copilot)

📌 Senior IT Auditor (Madrid)
🏢 Ferrovial
📍 Madrid