IT Audit Senior

Join a team that thrives on growth, purpose, and collaboration. 

At Zampa Partners, we believe in going further together. We’re an advisory firm where curious minds grow with purpose and where your impact matters from day one. 

We are seeking an experienced and dynamic IT Auditor. As part of our Internal Audit Department Cybersecurity, Risk and Technology Advisory team, you will support clients across various industries in strengthening their cybersecurity governance, regulatory compliance and operational resilience.

• Conducting IT and cybersecurity audits and assessments, including:

o User Access Management (UAM) reviews

o Information Security assessments

o ICT Risk Management assessments

o Business Continuity and Disaster Recovery (BCP/DR) reviews

o Third-Party Risk assessments

o Cybersecurity maturity assessments

o Regulatory gap analyses

• Supporting vCISO engagements by assisting with:

o Information security policy development and maintenance

o Risk identification, assessment and treatment

o Incident management and post-incident reviews

o Security governance and reporting

o Control design and implementation

o Security awareness initiatives

• →Reviewing and evaluating the design and effectiveness of IT controls against recognised frameworks and regulations.
• →Assisting clients in achieving compliance with regulatory requirements such as DORA, NIS2, MiCA and other applicable cybersecurity frameworks.
• →Preparing audit reports, risk assessments, management presentations and remediation plans for executive and board-level stakeholders.
• →Performing documentation reviews, evidence analysis and control testing.
• →Supporting client meetings, workshops and interviews with business and technical stakeholders.
• →Monitoring developments in cybersecurity threats, regulations and industry best practices.
• →Contributing to internal methodology development, templates and knowledge sharing initiatives.

• 2-4 years of experience in cybersecurity governance, IT audit, risk management or information security.

• Experience performing IT audits or cybersecurity assessments in one or more of the following areas:

o User Access Management (UAM)

o Information Security

o ICT Risk Management

o Business Continuity and Disaster Recovery

o Third-Party Risk Management

o Cloud Security

• Good understanding of cybersecurity regulations and frameworks, including:

o DORA

o NIS2

o MiCA

o ISO/IEC 27001

o NIST Cybersecurity Framework

o CIS Controls

o Cybersecurity governance

o Risk management

o Vulnerability management

o Network security

o Security operations

o Compliance and regulatory assessments

• Strong analytical skills with the ability to translate technical findings into business risks.
• Experience preparing reports and presenting findings to management and clients.

• Strong Microsoft Office skills, particularly Excel, Word and PowerPoint.

• Familiarity with GRC tools and security management platforms is considered an asset.

• Understanding of networking concepts, security controls and enterprise IT environments.

• Professional Certifications are an advantage:

o CISM

o CISSP

o CRISC

o ISO/IEC 27001 Lead Auditor or Lead Implementer

o Security+

o SSCP

o CISA

• Strong communication and stakeholder management skills.

• Ability to work independently and manage multiple projects simultaneously.

• Attention to detail and a risk-based mindset.

• Curiosity and willingness to continuously learn in the evolving cybersecurity landscape.

• Team player with the ability to collaborate across functions.

• CPE training and continuous development opportunities 

• Monthly mentoring check-ins and regular appraisals 

• Comprehensive health insurance 

• Employee Assistance Programme (EAP) 

• Beneficial loan rates through our partnership with a local bank 

We’re proud to be recognised with both the HR Quality Mark by FHRD and the Equality Mark certification, reflecting our commitment to outstanding HR practices, a culture of inclusion, and the wellbeing and growth of every team member. 

If this sounds like the next step in your career, we’d love to hear from you. Let’s build something meaningful together. 

Kindly note that only shortlisted candidates will be contacted.