Cyber Security _ Engineer

Role Overview:

This engineer position is designed to support the internal audit and compliance team in performing cybersecurity audits and assessments. The role provides hands-on exposure to cybersecurity standards such as ISO 27001, NIST and SOC 2 and offers a learning pathway for becoming a certified lead auditor.

Key Responsibilities:

• Assist in planning and conducting cybersecurity audits under supervision.
• Review and validate IT policies, procedures, and security controls.
• Collect and document audit evidence (logs, reports, screenshots).
• Support risk assessments and gap analysis activities.
• Participate in audit walkthroughs and internal interviews.
• Track and follow up on audit findings and corrective actions.
• Help prepare audit reports and summaries for review by senior auditors.
• Support coordination with external auditors or certifying bodies.

Qualifications & Skills:

• Bachelors degree in Computer Science, IT, Cybersecurity, or a related field.
• Basic knowledge of cybersecurity frameworks (ISO 27001, NIST, CIS).
• Understanding of information security principles and risk management.
• Good documentation and communication skills.
• Willingness to learn audit processes and compliance standards.

Preferred Certifications (Optional but Advantageous):

• ISO 27001:2022 ISMS Internal Auditor (or willingness to pursue)
• CISA Awareness level
• Microsoft SC-900 / CompTIA Security+
• Familiarity with GRC tools is a plus