Cybersecurity Auditor

Our client is a cybersecurity services company expanding its audit capabilities. They are building a trusted pool of experienced Cybersecurity Auditors to collaborate with on a long-term basis across multiple client projects.

Work is organized into predefined “audit packs” with a clear scope and estimated effort, so expectations are consistent and workloads can be planned fairly in advance.

What You’ll Do

Depending on your expertise, you may work on:

• Technical security audits (infrastructure, cloud, hybrid environments)
• Vulnerability assessments and risk analysis
• Compliance & regulatory audits aligned with frameworks such as ISO 27001, ENS, NIST, CIS
• Security posture reviews and gap analysis
• Evidence collection and validation (documentation + technical proof)
• Audit reporting with clear, actionable recommendations

Projects will vary in size and complexity; workload and scope are agreed upfront.

How the “Audit Packs” Work

Each pack typically includes:

• Defined scope (technical, compliance, or mixed)
• Review of documentation and/or technical evidence
• Identification of risks and gaps
• Actionable findings and recommendations
• A structured report aligned to the applicable framework

Each pack comes with an estimated number of hours based on repeat delivery. You’ll be asked to:

• Confirm whether the scope fits the estimate
• Highlight where estimates may be risky or unclear
• Suggest ways to improve quality and efficiency

The goal is a balanced model that scales over time not unrealistic timelines.

What We’re Looking For

• Proven experience as a Cybersecurity Auditor or Security Consultant
• Strong understanding of security controls, risks, and best practices
• Ability to write clear, professional audit reports (English required; Spanish is a plus)
• Hands-on experience with one or more frameworks: ISO / NIST / ENS / CIS (or similar)
• Reliable, detail-oriented, comfortable working with minimal supervision

Nice to Have

• Security certifications (e.g., Offensive Security, Altered Security, or similar)
• Experience auditing both SMEs and enterprise environments
• Familiarity with cloud platforms (AWS, Azure, GCP)