Cyber Security Analyst - Audit

Cyber Security Analyst – Audit Luxembourg OR Amsterdam, Netherlands Monday – Friday 8:00 am – 5:00 pm OR 9:00 am – 6:00 pm Hybrid We are seeking a Cybersecurity Analyst – Audit to support and enhance the organization’s security posture across multiple jurisdictions. This role is responsible for executing audit activities, strengthening compliance frameworks, and aligning security strategies across both legacy and modern technology environments. The candidate will work closely with audit partners and internal stakeholders to ensure adherence to audit and regulatory requirements and continuous improvement of security assurance practices. The ideal candidate has at least four years of experience in cybersecurity, IT audit, risk management, or compliance. This role ensures adherence to global regulatory standards (e.g., SOX, GDPR, ISO), evaluates control effectiveness, and serves as a primary liaison for auditors. The role requires strong risk assessment capabilities, proactive issue resolution, and a balanced focus on compliance and enterprise resilience in tandem with security leadership. Some of the things that you will be doing: Partner with global teams across business operations, compliance, IT, and legal to manage technology risk and regulatory compliance. Plan and execute internal, external, and jurisdictional audits in line with the audit roadmap. Develop and enhance security policies, standards, procedures, and compliance frameworks. Improve IT compliance processes and identify automation opportunities for control activities. Design and execute control testing strategies and ensure proper evidence documentation. Maintain and enhance control frameworks aligned with regulatory and industry standards. Conduct IT risk assessments and track remediation of identified gaps. Coordinate with auditors, regulators, and stakeholders during audit cycles. Track and report compliance metrics and program effectiveness indicators. Leverage GRC tools for audit management, evidence tracking, and reporting. Identify risks and vulnerabilities and recommend mitigation strategies. Manage third-party/vendor risk assessments and escalations. Respond to regulatory and jurisdictional audit requests. Provide actionable insights and reporting to security leadership. What technical skills, experience and qualifications do you need? Bachelor’s degree in Computer Science, Information Technology, MIS, or related field (or equivalent experience). 4+ years of experience in IT audit, risk management, or cybersecurity. Strong knowledge of Global regulatory frameworks such as SOX, GDPR, ISO, DORA PCI, PSD2 and NIST. Familiarity with audit standards and frameworks (SOC 1 & 2, ISO 27001, NIST, COSO, COBIT). Understanding of cybersecurity threat landscape and control environments. Knowledge of modern technologies including cloud, DevOps, application security, and AI. Experience working with/ customizing GRC tools (e.g., Archer, OneTrust, AuditBoard, Diligent). Strong analytical, communication, and problem-solving skills. Proactive approach towards available work requests and timely response. Ability to translate technical risks into business insights. Hands-on experience in IT disciplines and audit execution. Experience in global and multi-regulatory environments. Ability to manage complex compliance requirements across jurisdictions. Strong organizational and proactive risk management skills. High integrity, accountability, and professional excellence. CISSP, CISM, CRISC, CISA, CIA, or other relevant cybersecurity, audit, or risk certifications. #CSC #CSCCareers #LI-HL1