The English-language job board for Spain

Information Security and Cybersecurity Internal Auditor

Remote from Spain·Full-time·Added today (last checked 9 Nov)

Seresco

11 open roles

Apply

Our summary

Work mode: Remote from Spain
Contract: Permanent, full-time hours
Spanish: Expected (ad in Spanish)
Experience: 3+ years
Education: University degree
Benefits: Private health insurance, flexible pay plan

Visa options

The ad doesn’t mention sponsorship
No sponsorship mentioned, and this kind of work is rarely sponsored in Spain.

Find jobs with visa support

Skills

This job advert was originally written in Spanish.

Requirements

What we're looking for

University degree of MECES Level 2 or equivalent
Minimum professional experience of 3 years in IT internal auditing tasks.
Experience and knowledge in:
National Security Framework (ENS).
ISO/IEC 27001.
NIS2.
eIDAS.
ICT regulations related to information security and cybersecurity.
CISA (Certified Information Systems Auditor) certification or similar.
Experience in planning, execution, and follow-up of audits.
Experience in the review and analysis of controls and evidence.
Experience in the preparation of audit reports.
Ability to manage audit work autonomously.
Good communication, writing, and client relationship skills.

Nice to have

Additional certifications related to auditing and information security, such as ISO/IEC 27001 Lead Auditor.
Specific experience in ENS audits.
Experience in Information Security Management System audits according to ISO/IEC 27001.
Technical knowledge of systems, networks, and IT technologies related to cybersecurity.
Intermediate to advanced English proficiency.

Pay & benefits

What you'll get

Permanent contract.
Full-time.
Remote work.
Integration into a multidisciplinary team specialized in cybersecurity and regulatory compliance.
Flexible schedule: 37.5 hours per week, with time flexibility between 8:00 and 17:00.
35-hour workday during the months of July and August, in the 8:00 to 15:00 slot.
23 working days of vacation + December 24th and 31st.
By being part of Grupo Seresco, access to a flexible compensation plan, allowing you to use part of your gross salary for Medical Insurance (Sanitas, IMQ or Caser), including family members, Gourmet vouchers/cards, transport cards and/or childcare vouchers.

The role

At CIES, the cybersecurity unit of Grupo Seresco specializing in cybersecurity and regulatory compliance, we are looking for an Information Security and Cybersecurity Internal Auditor to join our consulting team.

We are looking for a profile with experience in IT internal auditing and cybersecurity, with knowledge of ENS, ISO/IEC 27001, NIS2, eIDAS and ICT regulations, and CISA or similar certification.

You will participate in cybersecurity and regulatory compliance projects, performing auditing activities, evaluation of controls and evidence, identification of deviations, and preparation and follow-up of reports.

What you'll do

Plan and execute IT and information security internal audits.
Perform compliance audits and assessments regarding ENS, ISO/IEC 27001, NIS2, eIDAS and other applicable ICT regulations.
Define the scope, objectives, planning, and program of the audits.
Analyze documentation, implemented controls, and evidence of compliance.
Identify non-conformities, observations, and opportunities for improvement.
Prepare detailed and executive audit reports, including conclusions and recommendations.
Follow up on corrective actions and improvement plans derived from audits.
Support and accompany clients during external audits and certification processes.
Maintain a direct relationship with clients and coordinate audit activities with the various responsible parties involved.

About Seresco

Seresco is an IT services company headquartered in Oviedo, Spain, specializing in HR management software, payroll processing, and digital transformation solutions. With a strong presence in the Spanish and Portuguese markets, the company serves both public and private sector clients, offering a broad portfolio that includes cybersecurity, cloud services, and business process outsourcing. Seresco has a significant workforce and operates across multiple regions, positioning itself as a key player in the Iberian IT services landscape.

In Spain, Seresco maintains its headquarters in Oviedo and has a notable presence in Madrid, Barcelona, and other cities, making it an accessible employer for international professionals seeking opportunities in the Spanish tech sector. The company's work culture emphasizes innovation and professional development, with a growing focus on data, AI, and cybersecurity roles. For international hires, Seresco offers a chance to work in a well-established Spanish company with a diverse project portfolio, though its global recognition is limited outside of Spain and Portugal.

Industry: IT Services
Founded: 1968
Employees: 1,000–5,000
Headquarters: Oviedo, Spain
In Spain: Oviedo, Madrid, Barcelona

Good to know if you are moving

Seresco is headquartered in Oviedo, a city in northern Spain known for its quality of life and lower cost of living compared to Madrid or Barcelona.
The company has a strong focus on HR and payroll software, which may be relevant for professionals with experience in these domains.
Seresco operates in both Spain and Portugal, offering opportunities for cross-border projects and regional career growth.
The company is investing in data, AI, and cybersecurity, creating roles for international engineers and consultants.
While Spanish is the primary working language, the company's international projects may require English, making it a viable option for non-native speakers.

All open roles at Seresco