Where Innovation Meets OpportunityAre you ready to elevate your career with a general leader in infrastructure solving complex problems and generating a positive outcome on people's lives? At Ferrovial, we are not just a company; Descubra exactamente qué habilidades, experiencia y cualificaciones necesitará para tener éxito en este puesto antes de enviar su solicitud a continuación.Nasdaq100 Index) and the Spanish Stock Exchanges (IBEX 35). Our Corporate organization oversees business activities, providing strategic planning, communication, legal, finance and human resources services to the business units.Global presence, local impact : Be part of a company that is shaping the future of infrastructure worldwide, with challenging roles and projects that make a real difference.Benefit from global and cross-business unit mobility, with development processes designed to ensure your professional growth.Utilize cutting-edge tools like Microsoft Copilot to enhance your productivity and efficiency.About The RoleThe successful candidate will join Ferrovial Internal Audit, located in Madrid.He/she will enjoy a double reporting line to the Audit Manager and the Head of IT Audit located in Madrid.Key ResponsibilitiesTake part in the planning of internal audits and in their execution, contributing to the establishment of added value action plans.Plan and execute technical cybersecurity audits across key domains: IAM, network and cloud security (Azure, AWS, M365), endpoint protection, vulnerability management, SIEM/SOC and cyber resilience.Support data protection and privacy audits when required, covering governance, classification, retention, DPIA,



data subject rights and technical controls (encryption, DLP).

QualificationsDegree in Computer Science, Telecommunications Engineering or a related technical field.4–5 years of experience in external audit or consulting, or at least 3 years in internal audit or an IT/Information Systems function.Knowledge of key cybersecurity frameworks and regulations, including NIST CSF 2.0, ISO , CIS Controls, NIS2, ENS and GDPR.Hands-on technical expertise across cybersecurity and data protection/privacy domains, including the areas outlined in the role responsibilities.Ability to assess gaps between best practices, regulatory requirements and internal policies, and translate them into practical control improvements.Strong analytical mindset and experience working with data and audit analytics tools such as IDEA, ACL or Power BI.Fluent business English, both written and spoken.Desirable / Highly ValuedProfessional certifications such as CISA, ISO , ISO * or cloud security certifications will be highly valued.Specialised training in cybersecurity, data protection or information systems governance will be considered a plus.Practical experience using Artificial Intelligence and Large Language Models — including tools such as Claude, Copilot, ChatGPT and Gemini — to enhance audit efficiency, automate routine tasks and support smarter, data-driven decision-making.Scripting and querying skills — Python, PowerShell, SQL or KQL — applied to audit testing, continuous auditing and automation of repetitive activities.Experience auditing in multinational environments, working across different geographies, stakeholders and regulatory frameworks.

📌 Senior It Auditor (Madrid)
🏢 ferrovia
📍 Madrid