OCA Global is a leading international group dedicated to inspection, quality control, testing, and certification (TIC sector). Founded in Spain, the company has grown into a global entity operating across diverse industries including energy, maritime, industrial, and environmental sectors, providing technical services to ensure safety and regulatory compliance for large-scale infrastructure projects.

Headquartered in Sant Cugat del Vallès, OCA Global maintains an extensive footprint across Spain with offices in nearly every major industrial and coastal region. For international professionals, the company offers a wide range of technical, engineering, and HSE roles, as well as growing opportunities in their digital services division, making it a key employer for those with specialized technical certifications and engineering backgrounds.

Founded in 2010 by Ramon de la Riva, OCA Global was established as an independent alternative in the testing, inspection, and certification sector. It has rapidly expanded through organic growth and strategic acquisitions to become a major global player.

For international professionals

Headquartered in Spain with a global presence in over 10 countries, offering potential for international career mobility.
Maintains a massive network of Spanish offices including Barcelona, Madrid, Valencia, and various industrial hubs like Algeciras and Vigo.
Heavy focus on technical engineering, Health & Safety (HSE), and regulatory inspection roles requiring specialized certifications.
Offers numerous entry-level 'Beca' (internship) programs for engineering and administrative students looking to enter the Spanish market.
Expanding digital services division creates opportunities for IT professionals, such as Mulesoft and API developers.

ICT Schemes Auditor

OCA Global

This job was originally posted in Spanish and automatically translated to English. You'll most likely need Spanish to apply.

Job Description

Are you motivated to work with high technical quality standards, where rigor and regulatory compliance make the difference?
Are you looking for an environment where your professional judgment and experience in information security have a real impact on organizations across different sectors?

At OCA Global, we want to incorporate an ICT Schemes Auditor to reinforce our technical team specialized in Information Security and the National Security Framework (ENS).

🎯 What will be your mission?

You will be part of the technical team that ensures nothing is left to chance regarding security, participating in ICT audits across multiple sectors and technological environments, with the direct support of the Technical Management.

🛠️ Your main day-to-day missions

Execute Information Security audits in accordance with ISO/IEC 27001, ensuring compliance with requirements and the correct evaluation of controls.
Perform National Security Framework (ENS) audits according to RD 311/2022, analyzing risks, measures, and adequacy levels.
Analyze complex technological environments, evaluating infrastructures, systems, and processes from a technical and regulatory approach.
Prepare clear and precise audit reports, providing solid and evidence-based conclusions.
Interact with clients and technical teams, explaining findings with rigor, professional judgment, and an orientation toward improvement.
Manage several audits simultaneously, maintaining high quality standards and meeting deadlines.

👀 What would we like to see in your profile?

University degree or equivalent (university-level vocational training), preferably in the ICT or information security field, necessary to understand complex technological environments.
Specific training in auditing, accredited via IRCA, ISO 19011, master's degrees, postgraduate studies, or specialized courses, key to ensuring structured audits aligned with international standards.
Minimum of 2 years of experience in information security, risk management, ICT audits, or technical consulting, to ensure autonomy and judgment in execution.
Proven knowledge and experience in ISO/IEC 27001 and ENS (RD 311/2022), fundamental for the performance of the position.
Professional certifications such as ISO/IEC 27001 Lead Auditor, CISSP, CISM, CRISC, CEH, or official ENS training from the CCN, which certify your technical specialization.
Knowledge of infrastructure and cybersecurity: networks, firewalls, access controls, data centers, virtualization, cloud, EDR/XDR, business continuity, or forensic analysis.
Technical rigor and analytical capacity, essential for working with demanding standards.
Communication and client relationship skills, to convey conclusions with clarity and competence.
Autonomy and responsibility, with availability for occasional travel according to audits.

🤝 Why join our project?

You will work in a specialized technical environment, where quality and regulatory compliance are priorities.
You will have a variety of projects and sectors, avoiding monotony and continuously expanding your experience.
You will enjoy professional autonomy, with clear objectives and constant technical support.
You will be part of a team with a high level of knowledge and collaboration, where mutual support is key.
Schedule from Monday to Thursday 8:30 AM to 6:00 PM and Friday 8:30 AM to 3:30 PM. Intensive workday in July and August and all eves of holidays. Christmas Eve and New Year's Eve off.
Flexible compensation: transport, restaurant, health insurance, childcare vouchers, and training.
Access to OCA Benefits, an employee discount portal.
Campus OCA, with technical and professional development training.
Open communication culture with Happyforce, social initiatives with LOCAL Initiative, and the Recomienda OCA referral program.

🌍 Who are we?

OCA Global is an international group specialized in inspection, testing, consulting, training, and certification.
Our purpose is clear: to leave nothing to chance and guarantee maximum safety and trust in people's daily lives through responsible management.

If you identify with an environment where technical rigor, precision, and responsibility make the difference, we want to meet you.

#LI-JM1

View original advert (Spanish)

¿Te motiva trabajar con altos estándares de calidad técnica, donde el rigor y el cumplimiento normativo marcan la diferencia?
¿Buscas un entorno en el que tu criterio profesional y tu experiencia en seguridad de la información tengan un impacto real en organizaciones de distintos sectores?

En OCA Global queremos incorporar un/a Auditor/a de Esquemas TIC para reforzar nuestro equipo técnico especializado en Seguridad de la Información y Esquema Nacional de Seguridad (ENS).

🎯 ¿Cuál será tu misión?

Formarás parte del equipo técnico que garantiza que nada quede al azar en materia de seguridad, participando en auditorías TIC en múltiples sectores y entornos tecnológicos, con el respaldo directo de la Dirección Técnica.

🛠️ Tus principales misiones en el día a día

Ejecutar auditorías de Seguridad de la Información conforme a ISO/IEC 27001, asegurando el cumplimiento de los requisitos y la correcta evaluación de controles.
Realizar auditorías de Esquema Nacional de Seguridad (ENS) según RD 311/2022, analizando riesgos, medidas y niveles de adecuación.
Analizar entornos tecnológicos complejos, evaluando infraestructuras, sistemas y procesos desde un enfoque técnico y normativo.
Elaborar informes de auditoría claros y precisos, aportando conclusiones sólidas y basadas en evidencias.
Interactuar con clientes y equipos técnicos, explicando hallazgos con rigor, criterio profesional y orientación a la mejora.
Gestionar varias auditorías de forma simultánea, manteniendo altos estándares de calidad y cumplimiento de plazos.

👀 ¿Qué nos gustaría ver en tu perfil?

Formación universitaria o equivalente (FP de nivel universitario), preferiblemente en el ámbito TIC o de seguridad de la información, necesaria para comprender entornos tecnológicos complejos.
Formación específica en auditoría, acreditada mediante IRCA, ISO 19011, másteres, posgrados o cursos especializados, clave para garantizar auditorías estructuradas y alineadas a estándares internacionales.
Experiencia mínima de 2 años en seguridad de la información, gestión de riesgos, auditorías TIC o consultoría técnica, para asegurar autonomía y criterio en la ejecución.
Conocimiento y experiencia contrastada en ISO/IEC 27001 y ENS (RD 311/2022), fundamentales para el desempeño del puesto.
Certificaciones profesionales como ISO/IEC 27001 Lead Auditor, CISSP, CISM, CRISC, CEH o formación oficial ENS del CCN, que acreditan tu especialización técnica.
Conocimientos en infraestructuras y ciberseguridad: redes, firewalls, controles de acceso, CPDs, virtualización, cloud, EDR/XDR, continuidad de negocio o análisis forense.
Rigor técnico y capacidad analítica, imprescindibles para trabajar con estándares exigentes.
Habilidades de comunicación y trato con cliente, para transmitir conclusiones con claridad y solvencia.
Autonomía y responsabilidad, con disponibilidad para desplazamientos puntuales según auditorías.

🤝 ¿Por qué unirte a nuestro proyecto?

Trabajarás en un entorno técnico especializado, donde la calidad y el cumplimiento normativo son prioritarios.
Tendrás variedad de proyectos y sectores, evitando la monotonía y ampliando continuamente tu experiencia.
Disfrutarás de autonomía profesional, con objetivos claros y respaldo técnico constante.
Formarás parte de un equipo con alto nivel de conocimiento y colaboración, donde el apoyo mutuo es clave.
Horario de lunes a jueves de 8:30h a 18:00h y viernes de 8:30h a 15:30h. Jornada intensiva en julio y agosto y todas las vísperas de festivo. Nochebuena y Nochevieja libres.
Retribución flexible: transporte, restaurante, seguro de salud, cheque guardería y formación.
Acceso a OCA Benefits, portal de descuentos para empleados.
Campus OCA, con formaciones técnicas y de desarrollo profesional.
Cultura de comunicación abierta con Happyforce, iniciativas sociales con LOCAL Initiative y programa de referidos Recomienda OCA.

🌍 ¿Quiénes somos?

OCA Global es un grupo internacional especializado en inspección, ensayos, consultoría, formación y certificación.
Nuestro propósito es claro: no dejar nada al azar y garantizar la máxima seguridad y confianza en la vida cotidiana de las personas a través de una gestión responsable.

Si te identificas con un entorno donde el rigor técnico, la precisión y la responsabilidad marcan la diferencia, queremos conocerte.

#LI-JM1