Principal Engineer Cybersecurity Assurance

About the role

The Principal Engineer Cybersecurity Assurance will lead proactive auditing and vulnerability identification for production systems, ensuring compliance with internal policies and industry standards. This role works closely with governance, compliance, IT, and operations teams to maintain a strong security posture.

Key responsibilities

• Conduct regular GITC audits of production environments, identify configuration gaps, security controls weaknesses, and vulnerabilities.
• Document findings and action plans in the Risk Control Self‑Assessment (RCSA) and keep it up‑to‑date.
• Provide management with clear reports on audit status, risks, and remediation progress.
• Collaborate with IT, security, and operations to close gaps and support external audit requirements.
• Assist in planning and executing internal penetration tests and security assessments.
• Continuously improve auditing processes, recommend tools and methodologies to enhance security.

Required profile

• Minimum 4 years of experience in IT auditing, GITC, vulnerability assessments, and security controls.
• Bachelor’s degree in Cybersecurity, IT, Computer Science or related field.
• Preferred certifications: CISA, CISSP, CISM.
• Strong knowledge of ISO 27001, NIST, SOC 2, GDPR and security testing tools.
• Excellent analytical, communication, and problem‑solving abilities.

Required skills

• GITC auditing
• Vulnerability assessment
• Security controls
• ISO 27001
• NIST framework
• SOC 2
• GDPR compliance
• Penetration testing
• Security testing tools