ICT Scheme Auditor

Description

Are you motivated to work with **high technical quality standards**, where rigor and regulatory compliance make the difference? Are you looking for an environment where your **professional judgment and experience in information security** have a real impact on organizations across various sectors? At OCA Global, we are seeking an **ICT Scheme Auditor** to strengthen our technical team specialized in **Information Security and the National Security Scheme (ENS)**. **What will be your mission?** You will join the technical team ensuring that nothing is left to chance in security matters, participating in ICT audits across multiple sectors and technological environments, with direct support from the Technical Management. **️** **Your key day-to-day responsibilities** * **Conduct Information Security audits** in accordance with ISO/IEC 27001, ensuring compliance with requirements and proper evaluation of controls. * **Perform National Security Scheme (ENS) audits** as per Royal Decree 311/2022, analyzing risks, measures, and levels of adequacy. * **Analyze complex technological environments**, evaluating infrastructures, systems, and processes from both technical and regulatory perspectives. * **Prepare clear and precise audit reports**, providing robust, evidence-based conclusions. * **Interact with clients and technical teams**, explaining findings with rigor, professional judgment, and a focus on improvement. * **Manage multiple audits simultaneously**, maintaining high quality standards and meeting deadlines. **What would we like to see in your profile?** * **University degree or equivalent** (university-level vocational training), preferably in ICT or information security, necessary to understand complex technological environments. * **Specific training in auditing**, certified by IRCA, ISO 19011, master’s programs, postgraduate courses, or specialized training, essential to ensure structured audits aligned with international standards. * **Minimum two years’ experience** in information security, risk management, ICT auditing, or technical consulting, to ensure autonomy and sound judgment in execution. * **Proven knowledge and experience in ISO/IEC 27001 and ENS (Royal Decree 311/2022\)**, fundamental for performing this role. * **Professional certifications**, such as ISO/IEC 27001 Lead Auditor, CISSP, CISM, CRISC, CEH, or official ENS training from CCN, validating your technical specialization. * **Knowledge and experience in infrastructure and cybersecurity**: networks, firewalls, access controls, data centers (CPDs), virtualization, cloud, EDR/XDR, business continuity, or forensic analysis. * **Technical rigor and analytical capability**, essential for working with demanding standards. * **Communication and client-handling skills**, to convey conclusions clearly and authoritatively. * **Autonomy and responsibility**, with willingness to travel occasionally as required by audits. **Why join our project?** * You will work in a **specialized technical environment**, where quality and regulatory compliance are top priorities. * You will enjoy **a variety of projects and sectors**, avoiding monotony and continuously expanding your experience. * You will benefit from **professional autonomy**, with clear objectives and constant technical support. * You will join a team with a **high level of expertise and collaboration**, where mutual support is key. * Working hours: Monday to Thursday, 8:30 a.m. to 6:00 p.m.; Friday, 8:30 a.m. to 3:30 p.m. Intensive schedule in July and August, and all days before public holidays. Christmas Eve and New Year’s Eve are non-working days. * **Flexible remuneration**: transportation, meal allowance, health insurance, childcare vouchers, and training. * Access to **OCA Benefits**, an employee discount portal. * **OCA Campus**, offering technical and professional development training. * Open communication culture via **Happyforce**, social initiatives through **LOCAL Initiative**, and the referral program **Recomienda OCA**. **Who are we?** OCA Global is an international group specializing in inspection, testing, consultancy, training, and certification. Our purpose is clear: **leaving nothing to chance and guaranteeing maximum security and trust in people’s daily lives through responsible management**. If you identify with an environment where technical rigor, precision, and responsibility make the difference, **we want to meet you**. \#LI\-JM1