The internal auditor is responsible for preparing and conducting three IT-related audit assignments, focusing on information security, life cycle management of IT systems, and cybersecurity governance.

Specifically, the assignment includes:

• Preparing and conducting ISO27001 audits
  Preparing and conducting internal audits to maintain and further mature the existing ISO27001 certification, including assessing the implementation, operation, and effectiveness of control measures and the follow-up of previous findings.

• Risk-based audit of Life Cycle Management of IT systems
  Preparing and conducting a risk-based audit regarding the end-to-end life cycle management of IT systems, with particular attention to governance, decision-making, control measures, and the controlled phasing out of legacy systems.

• Support in the implementation of the IIA Topical Requirement Cybersecurity
  Providing substantive support in translating and embedding the IIA Topical Requirement Cybersecurity within the internal audit framework, including alignment with existing audit methodology, audit planning, and reporting.

The internal auditor collaborates with Internal Audit, performs the activities independently, objectively, and in accordance with IIA standards, and reports findings, conclusions, and recommendations in a clear and substantiated manner to relevant stakeholders.

Working from other locations is possible (Mechelen / Hasselt / Brussels).

Context / Requirements:

• Demonstrable experience as Auditor - senior 5 years
• Demonstrable experience with audit methodologies (GIAS standards)
• Experience with conducting Internal ISO audits
• Experience with conducting IT-related audits
• Knowledge of ISO27000
• Knowledge of topical requirement is a plus

Language requirement: Dutch at European CEFR level C2.