Skip to content
MVPeople Group Logo
MVPeopleGroup
GRC & Compliance

IT Auditor – Internal Controls & Compliance

Apeldoorn, GEConsultancyHybrideMedioroverige

Over de opdracht

You audit IT systems, processes, and controls to ensure they meet regulatory and internal standards. Your work directly impacts how the organization manages risk, secures assets, and demonstrates compliance to stakeholders.

You'll evaluate control effectiveness, identify gaps, and recommend improvements. You combine technical security knowledge with audit discipline to build trust in the IT environment.

Jouw werkzaamheden

  • Design and execute IT audit plans covering infrastructure, applications, and operational controls
  • Assess compliance against ISO 27001, NIS2, DORA, COBIT, and industry-specific frameworks
  • Evaluate risk management practices and security control implementation maturity
  • Document audit findings, classify risk severity, and recommend remediation actions
  • Coordinate with business and IT teams to understand control objectives and validate improvements
  • Prepare audit reports and present findings to management and audit committees
  • Monitor remediation progress and validate control effectiveness over time
  • Stay current with regulatory changes and emerging audit standards

Tech Stack & Tools

Platforms & Tooling

ServiceNow GRCArcherACL AnalyticsCAST Highlight

Frameworks & Standaarden

ISO 27001ISO 27002COBIT 2019NIST Cybersecurity FrameworkDORANIS2COSO Internal Control Framework

Methodieken

Risk-based audit planningControl testing and validationAudit sampling techniquesContinuous audit

Certificeringen (pré)

CIA (Certified Internal Auditor)CISA (Certified Information Systems Auditor)CRISC (Certified in Risk and Information Systems Control)CISSP

Must-haves

  • 3+ years of IT audit, IT risk, or internal controls experience
  • Solid understanding of IT security controls and governance frameworks
  • Knowledge of compliance requirements (ISO 27001, COBIT, or equivalent)
  • Strong analytical and communication skills; ability to translate technical findings for non-technical audiences
  • Experience with audit tools and documentation practices

Nice-to-haves

  • Background in GRC platforms (ServiceNow GRC, Archer) or audit management systems
  • Exposure to cloud security controls and infrastructure auditing
  • Familiarity with continuous audit and automated control monitoring

Wat wij bieden

  • Shape organizational risk and compliance maturity
  • Work across all IT domains—cloud, infrastructure, applications, security
  • Develop audit expertise and professional certifications
  • Collaborate with senior management and board-level committees
  • Competitive compensation and development support
  • Personal guidance from a dedicated MVPeople consultant who knows your niche

Het proces

1

Kennismaking

Telefonisch gesprek met je MVPeople consultant (binnen 24 uur)

2

Match & Brief

We bespreken de opdracht in detail en bereiden je voor

3

Klantgesprek

Introductie bij de opdrachtgever

4

Start

Contractering en onboarding

Details

Type

Consultancy

Locatie

Apeldoorn, GE

Werkmodel

Hybride

Niveau

Medior

Sector

overige

Geplaatst

9 juni 2026


Contact

Reageer directMeer informatie
Reageer direct