CPA Auditor - German & English Speaker

German-Speaking CPA Information Security Auditor

Job Title: Information Security Auditor – German Market

Employment Type: Permanent, Full-time

Language Requirements: Fluent German and professional English

Location: Remote

About Consilium Labs

Consilium Labs is an independent information security audit firm and certification body providing cybersecurity, information security, privacy, and compliance assessment services to organisations worldwide.

Our services include ISO/IEC 27001, ISO/IEC 27701, ISO/IEC 42001, SOC 2, CSA STAR, C5, and other cybersecurity and regulatory compliance assessments.

We are committed to delivering independent, objective, and evidence-based audits that help organisations demonstrate compliance and strengthen trust with their stakeholders.

We are looking for a German-speaking Information Security Auditor to join our growing Audit & Certification team. The successful candidate will conduct independent information security audits, certification assessments, and compliance evaluations for German-speaking clients.

This role requires a strong understanding of information security management systems, international compliance frameworks, audit methodologies, and regulatory requirements. The candidate will work closely with clients and internal audit teams to evaluate security controls, review documentation, assess compliance, and prepare comprehensive audit reports.

The ideal candidate has practical experience conducting ISO audits and cybersecurity assessments, excellent communication skills in German and English, and a strong commitment to auditor independence and professional integrity.

Key Responsibilities

Information Security Auditing & Certification

• Conduct independent information security audits and assessments for German-speaking clients.
• Perform ISO/IEC 27001 audits, including Stage 1, Stage 2, surveillance, and recertification audits, subject to assigned competence and authorisation.
• Conduct assessments against ISO/IEC 27701 and ISO/IEC 42001, where qualified.
• Evaluate Information Security Management Systems (ISMS), Privacy Information Management Systems (PIMS), and Artificial Intelligence Management Systems (AIMS).
• Assess organisational policies, procedures, risk management practices, and security controls against applicable standards.
• Review audit evidence, identify nonconformities, and document objective findings.

Compliance & Risk Assessment

• Evaluate information security controls against applicable frameworks, including SOC 2, NIST, CSA STAR, and other relevant compliance requirements.
• Assess cybersecurity governance, risk management, access controls, incident management, business continuity, and data protection practices.
• Identify control gaps, compliance risks, and areas of nonconformity based on objective audit evidence.
• Ensure audit activities follow applicable accreditation requirements and internal quality procedures.

Audit Documentation & Reporting

• Prepare detailed audit reports, working papers, and assessment documentation.
• Document audit findings, observations, and nonconformities accurately and objectively.
• Present audit results and findings to clients and relevant stakeholders.
• Maintain complete and accurate audit records in accordance with internal procedures and applicable standards.

Client & Stakeholder Management

• Communicate with German-speaking clients throughout the audit and certification process.
• Conduct audit meetings, opening and closing meetings, and stakeholder interviews in German.
• Coordinate with internal auditors, technical specialists, and certification personnel.
• Clarify audit requirements, evidence expectations, and assessment processes while maintaining independence and impartiality.

Qualification & Requirements

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Information Systems, or a related field.
• Professional experience in information security auditing, cybersecurity compliance, IT auditing, or risk assessment.
• Strong knowledge of ISO/IEC 27001 and information security management systems.
• Experience conducting internal, external, or third-party audits.
• Understanding of ISO/IEC 17021-1, ISO/IEC 27006-1, and ISO 19011 auditing principles is an advantage.
• Relevant ISO Lead Auditor or Lead Implementer certification is preferred.
• Familiarity with SOC 2, NIST, ISO/IEC 27701, ISO/IEC 42001, or CSA STAR is an advantage.
• Excellent verbal and written communication skills in German and English.
• Ability to review technical documentation, assess evidence, and prepare formal audit reports.
• Strong analytical, organisational, and problem-solving skills.
• Willingness to work with international clients and distributed audit teams.

Mandatory Professional Licence and Registration

• Hold a valid German Wirtschaftsprüfer (WP) qualification, equivalent to a German Public Auditor licence.
• Maintain active registration and good standing with the Wirtschaftsprüferkammer (WPK).
• Be legally authorised to practise as a Wirtschaftsprüfer in Germany, with no current suspension, revocation, or restrictions on professional practice.
• Provide proof of current professional registration and good standing upon request.

Preferred Certifications

• ISO/IEC 27001 Lead Auditor
• ISO/IEC 27701 Lead Auditor
• ISO/IEC 42001 Lead Auditor
• Certified Information Systems Auditor (CISA)
• Certified Information Security Manager (CISM)
• Certified Information Systems Security Professional (CISSP)
• Other recognised cybersecurity and information security audit qualifications.

Key Competencies

• Auditor independence and professional integrity.
• Strong analytical and critical-thinking abilities.
• Excellent documentation and report-writing skills.
• Effective client communication and stakeholder management.
• Attention to detail and evidence-based decision-making.
• Ability to manage multiple audit engagements and deadlines.
• Adaptability in a multicultural and international working environment.

What We Offer

• Opportunity to work with an international information security audit and certification organisation.
• Exposure to global cybersecurity standards and compliance frameworks.
• Professional development and certification opportunities.
• Collaboration with experienced auditors and technical specialists.
• Opportunities to contribute to international audit and certification engagements.
• Competitive compensation and career development opportunities.