We are looking for a Junior IT Security Auditor to join our cybersecurity team. The main mission of the role will be to perform security assessments and audits of information systems , identify vulnerabilities and non-conformities, and recommend appropriate technical and organizational measures to strengthen security. The IT Security Auditor will contribute to ensuring technical, operational, regulatory, and legal compliance across information systems.

Key Responsibilities Security Audits & Risk Analysis Perform and support IT security audits and assessments . Participate in local security inspections, including vulnerability assessments, penetration tests, and architecture reviews . Identify security risks, vulnerabilities, and non-conformities.

Assess the correct implementation of security procedures and controls. Follow up on identified risks and remediation actions. Security & Compliance Review organizational and technical security controls .

Assess Disaster Recovery

Plans (DRP), Business Continuity measures, and DLP (Data Loss Prevention) controls. Verify compliance with applicable security standards, policies, and regulatory requirements . Monitor the implementation of audit recommendations and corrective actions.

Prepare security audit reports describing identified vulnerabilities, risks, and non-conformities. Provide technical and organizational recommendations to mitigate identified risks. Prepare technical documentation and security guidance on Information Systems Security topics.





Communicate audit findings clearly to relevant technical and business stakeholders.

Security

Monitoring & Continuous Improvement Maintain an active technology and cybersecurity watch on relevant threats, vulnerabilities, regulations, and security practices. Contribute to the continuous improvement of security audit methodologies and processes. Support the development or improvement of tools used for security assessments and audits .

Profile

Degree in Computer Science, Cybersecurity, Telecommunications, Information Systems , or a related field. Initial professional experience or strong academic background in IT Security, Cybersecurity Audit, IT Risk, or GRC . Understanding of information security principles and risk management.

Knowledge of areas such as: IT Security Auditing Vulnerability Management DLP Business Continuity / Disaster Recovery Security Compliance Security architecture Familiarity with security standards and frameworks such as ISO 27001, NIST, CIS Controls , or similar is valued. Basic knowledge of vulnerability assessment and penetration-testing concepts. Strong analytical and documentation skills.

Ability to communicate security findings clearly and provide practical recommendations. Seniority IT Security Audit Reports Vulnerability and Risk Assessments Technical and Organizational Recommendations Non-Conformity Follow-up Reports Security Technical Documentation Performance Indicators Number of security audits performed. Implementation rate of audit recommendations.

Follow-up and resolution of identified non-conformities

📌 Security Auditor - Junior (Madrid)
🏢 Innoit Consulting
📍 Madrid