Information Security Audit & GRC Manager

About the role

Join Auxis as an Information Security Audit & GRC Manager and play a key role in Information Security, Risk, Compliance, and IT Audit initiatives. You will lead internal and external audits, evaluate security controls, identify risks and gaps, and work with teams across the organization to strengthen security and compliance programs.

Key responsibilities

• Lead internal and external IT and Information Security audits, planning scope, timelines and overseeing execution.
• Perform control testing, evaluate security controls and identify risks and gaps.
• Drive remediation and support compliance with ISO 27001, NIST, SOC 2, GDPR and related standards.
• Use GRC tools to manage controls, risks, assessments, evidence and remediation.
• Partner with Technology, Risk, Compliance and business stakeholders and prepare clear audit, risk and compliance reports for leadership.

Required profile

• Experience in IT Audit, Information Security, Risk, Compliance or GRC.
• Bachelor’s degree in Computer Science, Engineering, Information Security or related field, or equivalent experience.
• B2+ English proficiency.
• Preferred certifications: CISA, CRISC, CISM or CISSP.

Required skills

• Security controls and control testing.
• Knowledge of ISO 27001, NIST, SOC 2, GDPR frameworks.
• Experience with GRC tools.