ICT Scheme Auditor

• Flexible compensation: transport, restaurant, health insurance, childcare vouchers, and training.

• Access to OCA Benefits, an employee discount portal.

• OCA Campus, with technical and professional development training.

• Open communication culture with Happyforce, social initiatives with LOCAL Initiative, and the Recomienda OCA referral program.

Are you motivated to work with high technical quality standards, where rigor and regulatory compliance make the difference?

Are you looking for an environment where your professional judgment and experience in information security have a real impact on organizations across different sectors?

At OCA Global, we want to hire an Information Security Management Systems Auditor under the ISO 27001 standard.

🎯 What will your mission be?

You will be part of the technical team that ensures nothing is left to chance when it comes to security, participating in ICT audits across multiple sectors and technological environments, with the direct support of the Technical Management.

🛠️ Your main day-to-day responsibilities

• Execute Information Security audits in accordance with ISO/IEC 27001, ensuring compliance with requirements and the correct evaluation of controls.

• Analyze complex technological environments, evaluating infrastructures, systems, and processes from a technical and regulatory approach.

• Prepare clear and precise audit reports, providing solid conclusions based on evidence.

• Interact with clients and technical teams, explaining findings with rigor, professional judgment, and an orientation toward improvement.

• Manage several audits simultaneously, maintaining high quality standards and meeting deadlines.

• Schedule from Monday to Thursday from 8:30h to 18:00h and Friday from 8:30h to 15:30h. Intensive working day in July and August and all days before public holidays. Christmas Eve and New Year's Eve off.

• Knowledge of ENS (Esquema Nacional de Seguridad) will be positively valued.

• University degree or equivalent (Higher Vocational Training at university level), preferably in the ICT or information security field, necessary to understand complex technological environments.

• Specific training in auditing, accredited through IRCA, ISO 19011, master's degrees, postgraduate studies, or specialized courses, key to ensuring structured audits aligned with international standards.

• Minimum of 2 years of professional experience in information security, risk management, ICT audits, or technical consulting, to ensure autonomy and judgment in execution.

• Proven knowledge and experience in ISO/IEC 27001, fundamental for the performance of the position.

• Professional certifications such as ISO/IEC 27001 Lead Auditor, CISSP, CISM, CRISC, CEH, or official CCN ENS training, which certify your technical specialization.

• Knowledge in infrastructure and cybersecurity: networks, firewalls, access controls, data centers, virtualization, cloud, EDR/XDR, business continuity, or forensic analysis.

• Technical rigor and analytical capacity, essential for working with demanding standards.

• Communication skills and client relations, to convey conclusions with clarity and proficiency.

• Autonomy and responsibility, with availability for occasional travel depending on audits.

• You will work in a specialized technical environment, where quality and regulatory compliance are priorities.

• You will have a variety of projects and sectors, avoiding monotony and continuously expanding your experience.

• You will enjoy professional autonomy, with clear objectives and constant technical support.

• You will be part of a team with a high level of knowledge and collaboration, where mutual support is key.