Junior ISO 27001 Information Security Auditor

The base salary for this position starts from 56 000 Euro gross annually

Junior Information Security Auditor

Are you passionate about information security and helping organizations build trust through internationally recognized standards?

Do you enjoy working with a variety of clients and making a real impact on their information security management systems?

If so, we'd like to hear from you.

• As an
• Junior

Information Security Auditor , you will perform independent assessments against internationally recognized information security standards.

You will work closely with clients to evaluate the effectiveness of their Information Security Management Systems (ISMS), provide valuable insights, and contribute to improving their security posture.

Key Responsibilities

• Prepare, plan, and conduct information security audits in accordance with applicable standards, accreditation requirements, and company procedures.
• Assess clients' Information Security Management Systems and produce clear, accurate, and professional audit reports.
• Present audit findings to clients, ensuring they understand the assessment outcome and any required corrective actions.
• Recommend the issuance, continuation, suspension, or withdrawal of certification in accordance with company policies and accreditation requirements.
• Deliver recommendations within prescribed quality standards and reporting timelines.
• Lead audit teams where required, ensuring effective planning, coordination, and delivery of audit activities.
• Maintain overall responsibility for assigned client accounts, building strong long-term relationships while ensuring excellent service delivery and identifying opportunities for account growth.
• Develop and maintain audit plans.
• Work closely with internal support teams to ensure client records, audit documentation, and certification information remain accurate and up to date.
• Plan and manage your own audit schedule to maximize efficiency, client satisfaction, and revenue-generating activities.
• Contribute to achieving annual operational, utilization, and financial performance targets.
• Stay current with developments in information security standards, regulations, and industry best practices.

What We're Looking For

• Solid professional experience in information security, with a good understanding of security governance, risk management and controls.
• Sound knowledge of relevant information security standards and frameworks, such as ISO/IEC 27001, BSI IT-Grundschutz, NIST CSF or COBIT.
• Previous audit or assessment experience is an advantage.
• Willingness to undertake further qualifications in related standards and assessment schemes, such as ISO 22301, ISO/IEC 20000-1, ISO 9001 or TISAX.
• Strong analytical and problem-solving skills, with the ability to understand complex environments and evaluate information security risks and controls.
• Excellent communication and stakeholder management skills, with the confidence to engage with both technical specialists and senior management.
• Strong organizational and planning skills, with the ability to independently manage multiple client engagements and priorities.
• Ability to build trusted client relationships and adapt effectively to diverse cultural environments in Germany and internationally.
• Comfortable working independently as well as collaborating with and, where appropriate, leading audit teams.
• Flexibility and willingness to travel to client locations when required (approximately 50% travel).
• Language Skills Required

German

Excellent proficiency, both written and spoken (CEFR C1 or above)

English

Very good proficiency, both written and spoken (CEFR B2 or above)

What We Offer

• The opportunity to work with a diverse portfolio of clients across multiple industries.
• Continuous professional development and training.
• A collaborative and supportive international team environment.
• Career progression opportunities within a global certification and assurance organization.
• Competitive salary and benefits package.

If you're committed to helping organizations strengthen their information security while delivering exceptional client experiences, we'd love to welcome you to our team.