# Information Security Auditor at Xm

> Hybrid · Cyprus · Unspecified · Security · open. Source: https://alderhq.app/jobs/lever_eu%3Axm%3A416c92e0-cbd5-49ea-9a78-7b2310a4e829 (read 2026-11-11).

## Facts (observed)

- Company: [Xm](https://alderhq.app/companies/xm)
- Location text: Limassol; Nicosia; Athens; Thessaloniki
- Where it can be done from (inferred): Hybrid · Cyprus (evidence: "Location: Limassol; Nicosia; Athens; Thessaloniki")
- Posted: 2025-01-15 (665 days ago)
- First seen by alder: 2026-11-04 · last verified: 2026-11-11
- Reposted: 0 times · edited: 1 times
- Apply on the employer's site: https://jobs.eu.lever.co/xm/416c92e0-cbd5-49ea-9a78-7b2310a4e829
- Skills listed (inferred): AWS, GCP, Azure

## Pay and sponsorship

- Posted pay: not posted

## Description (the employer's text)

### The Role

We are looking for an experienced, passionate and self-motivated professional to join our fast-growing Information Security team. As part of our Information Security Audit Program, you will have the opportunity to assess and improve security controls across a dynamic and fast-paced environment. You will work with cutting-edge technologies and talented professionals, gaining hands-on experience in security assessments, compliance audits, and risk management.

### The main responsibilities of the position include:

- Perform hands-on complex security audits in IT infrastructure, applications, technologies and third parties
- Assess internal controls, processes and policies related to Information Technology and Security identifying deficiencies, and developing remediation strategies
- Prepare comprehensive audit reports summarizing the audit scope, results of test work, findings and recommend corrective actions
- Identify information security risks and make recommendations which are appropriate, practical and cost-effective
- Manage and monitor the progress of remediation steps on audit findings
- Ensure the organization meets all information security requirements of applicable laws and regulations
- Liaise with external auditors and internal stakeholders in successful execution of all compliance audits
- Provide regular reports and metrics on the security posture to the relevant stakeholders
### Main requirements:

- BSc/MSc in Information Security or any other related field
- Minimum 2 years working experience in an Information Security related field
- Experience in IT Systems and Security audit, vulnerability assessments and security risk management
- Demonstrated experience in auditing large scale infrastructures, information systems, IT processes and advanced security controls
- Good knowledge of information and security technologies such as Windows and Active Directory, Linux, virtualization, host and application security, networking, firewalls, security architecture etc
- Hands-on experience in auditing cloud infrastructures (AWS, Azure, GCP etc) will be considered an advantage
- Good understanding of security regulations and frameworks such as ISO 27001, NIST CSF and 800-53, GDPR, DORA etc
- Strong project and time management skills with the ability to work independently under minimal supervision and as part of a team
- Meticulous attention to detail with an analytical mind and outstanding problem-solving skills
- Excellent communication skills with the ability to explain technical concepts to a non-technical audience
- Audit-related and other information security certifications such as CISA, ISO 27001 Lead Auditor, CISSP, CCSP etc will be considered an advantage
### Benefit from:

- Attractive remuneration package plus performance related reward
- Private health insurance
- Corporate pension fund
- Intellectually stimulating work environment
- Continuous personal development and international training opportunities
### The Hiring Experience: What Awaits You

- Let’s Connect – Intro Chat with Talent Acquisition
- Deep Dive – First Interview with Your Future Team
- Final Connection – Final Interview
All applications will be treated with strict confidentiality!

By submitting this application, I confirm that I have read and agree to the terms of the Privacy and Data Protection Notice and the Confidentiality Undertaking.

---
Data: alder (https://alderhq.app). Cite https://alderhq.app/jobs/lever_eu%3Axm%3A416c92e0-cbd5-49ea-9a78-7b2310a4e829 and the date you read it. Observed facts come from the employer's own listing; location reach, level, family and skills are inferences.