Looking for Information Security Auditor (CISA / CISSP / CIA) – Part-time, Remote with travel to Switzerland

V-Spot is a cybersecurity firm working with regulated organisations across Switzerland and Europe. We are looking for an experienced Information Security Auditor to lead security audits and assessments for clients handling highly sensitive personal data.

What you'll do:

• Plan and run information security and data protection audits, including on-site audits at client organisations (interviews, document reviews, sampling, process checks, physical security and access control inspections)
• Assess the effectiveness of security controls: access and role management, incident management, change and patch management, backup and recovery, monitoring and endpoint protection
• Scope, coordinate and review penetration tests of web applications, APIs and infrastructure, and turn technical findings into audit conclusions
• Carry out risk analyses and protection-needs assessments, and document residual risks
• Review and help develop ISMS and data protection concepts, security policies, minimum standards and business continuity / disaster recovery plans (BCM)
• Review annual security reports and follow up on remediation of audit and pentest findings, including re-audits
• Support data protection impact assessments (DPIA) and incident response, including lessons learned
• Advise clients on information security and data protection, and present findings clearly to management and technical teams
• Write audit reports and documentation in English