CSC is a global leader in providing business, legal, tax, and digital brand services to companies around the world. With more than 8,000 employees, CSC operates in more than 140 jurisdictions, delivering solutions that help businesses thrive. We pride ourselves on our client-focused approach, market-leading expertise, and unmatched global reach.
Cyber Security Analyst - Audit
Location
Luxembourg + 3 moreAll locations: Luxembourg | Ireland | United Kingdom | Netherlands
Posted
14 hours ago
Salary
0
Seniority
Mid Level
Job Description
Cyber Security Analyst - Audit
CSC
Cyber Security Analyst – Audit Luxembourg OR Amsterdam, Netherlands Monday – Friday 8:00 am – 5:00 pm OR 9:00 am – 6:00 pm Hybrid We are seeking a Cybersecurity Analyst – Audit to support and enhance the organization’s security posture across multiple jurisdictions. This role is responsible for executing audit activities, strengthening compliance frameworks, and aligning security strategies across both legacy and modern technology environments. The candidate will work closely with audit partners and internal stakeholders to ensure adherence to audit and regulatory requirements and continuous improvement of security assurance practices. The ideal candidate has at least four years of experience in cybersecurity, IT audit, risk management, or compliance. This role ensures adherence to global regulatory standards (e.g., SOX, GDPR, ISO), evaluates control effectiveness, and serves as a primary liaison for auditors. The role requires strong risk assessment capabilities, proactive issue resolution, and a balanced focus on compliance and enterprise resilience in tandem with security leadership. Some of the things that you will be doing: - Partner with global teams across business operations, compliance, IT, and legal to manage technology risk and regulatory compliance. - Plan and execute internal, external, and jurisdictional audits in line with the audit roadmap. - Develop and enhance security policies, standards, procedures, and compliance frameworks. - Improve IT compliance processes and identify automation opportunities for control activities. - Design and execute control testing strategies and ensure proper evidence documentation. - Maintain and enhance control frameworks aligned with regulatory and industry standards. - Conduct IT risk assessments and track remediation of identified gaps. - Coordinate with auditors, regulators, and stakeholders during audit cycles. - Track and report compliance metrics and program effectiveness indicators. - Leverage GRC tools for audit management, evidence tracking, and reporting. - Identify risks and vulnerabilities and recommend mitigation strategies. - Manage third-party/vendor risk assessments and escalations. - Respond to regulatory and jurisdictional audit requests. - Provide actionable insights and reporting to security leadership. What technical skills, experience and qualifications do you need? - Bachelor’s degree in Computer Science, Information Technology, MIS, or related field (or equivalent experience). - 4+ years of experience in IT audit, risk management, or cybersecurity. - Strong knowledge of Global regulatory frameworks such as SOX, GDPR, ISO, DORA PCI, PSD2 and NIST. - Familiarity with audit standards and frameworks (SOC 1 & 2, ISO 27001, NIST, COSO, COBIT). - Understanding of cybersecurity threat landscape and control environments. - Knowledge of modern technologies including cloud, DevOps, application security, and AI. - Experience working with/ customizing GRC tools (e.g., Archer, OneTrust, AuditBoard, Diligent). - Strong analytical, communication, and problem-solving skills. - Proactive approach towards available work requests and timely response. - Ability to translate technical risks into business insights. - Hands-on experience in IT disciplines and audit execution. - Experience in global and multi-regulatory environments. - Ability to manage complex compliance requirements across jurisdictions. - Strong organizational and proactive risk management skills. - High integrity, accountability, and professional excellence. - CISSP, CISM, CRISC, CISA, CIA, or other relevant cybersecurity, audit, or risk certifications. #CSC #CSCCareers #LI-HL1 About Us CSC is a global business, legal, and financial services company based in Wilmington, Delaware, USA, providing knowledge-based solutions to clients worldwide. We have offices and capabilities in over 140 jurisdictions in the Americas, Europe, Asia Pacific, and the Middle East, and more than 8,000 colleagues. We are the business behind business.® Visit our careers site to learn more about CSC and our commitment to our clients, communities, and each other. CSC is committed to creating a feeling of belonging through a diverse and growth-oriented environment where everyone is valued. CSC colleagues have global career opportunities and excellent benefits, including annual success-sharing bonuses or commission plans based on individual performance. To learn more, visit cscglobal.com/service/careers. We offer a range of support to colleagues with disabilities, ensuring people have the necessary resources to thrive in their roles. We encourage candidates to work closely with our talent acquisition partners to convey their specific needs. Our commitment to accessibility reflects our broader dedication to diversity and belonging, CSC only accepts resumes from employment agencies that are part of our approved supplier program. Resumes submitted from other agencies either to talent acquisition, our hiring leaders, employees, or through any other mechanism other than our supplier process, will not be eligible to claim related fees and the submitted resumes will be considered property of CSC. We encourage candidates to apply directly to our website and not through third-party sources. Disclaimer: The information above describes the general nature and level of work performed by employees in this role. It is not intended to describe all duties, responsibilities, and qualifications. About the Team At CSC®, we’re always looking ahead, finding ways to innovate, challenge the status quo, and anticipate the needs of our clients. We exceed expectations by adapting client ambitions and goals as our own. This Fierce Client Spirit has helped us adapt and create solutions that have enabled businesses to run smoother and smarter for more than 125 years. It’s also the reason we’re the trusted partner of many of the world’s most successful organizations. CSC is committed to attracting, developing, and retaining talented people whose values align with ours. We empower our colleagues to bring the right solutions to market to meet client demand. That’s why we are the leading provider of business administration and compliance solutions. - CSC is a great place to work with smart and dedicated people. - We have won several employer recognition awards, including Top Workplace USA, Great Places to Work India, and Built In’s Best Places to Work. - We offer fulfilling work and career opportunities. Most positions are filled with internal moves and employee referrals. - Employees are eligible for Success Sharing, bonuses, or commission plans based on role and individual performance. - CSC offers a competitive and comprehensive benefits package that includes annual leave, tuition reimbursement, referral bonuses, and more. - As business needs allow, CSC offers hybrid or remote work schedules in alignment with local regulations. Specific details for this position will be discussed during the interview process.
Related Guides
Related Categories
Related Job Pages
More Security Engineer Jobs
IT Security Administrator
KBR, Inc.We deliver science, technology and engineering solutions to governments and companies around the world.
• Administer KBR's Active Directory, Azure/Entra, and other information security systems • Ensure that security controls, procedures, and designs are in line with established information security standards • Process security requests to ensure proper approvals are documented • Collaborate with other teams to design and implement secure systems • Monitor queue to resolve and troubleshoot various system access issues • Identify and investigate security violations, determine causes, and execute corrective measures • Manage and monitor security events and incidents, provide incident response • Participate in security audits and assessments, provide support for corrective actions • Maintain knowledge of the latest security trends, threats, and vulnerabilities.
Cyber Security Operations Specialist
The FormulaWir feiern Vielfalt. Deshalb begrüßen wir ausdrücklich alle Bewerbungen – unabhängig von Geschlecht, geschlechtlicher Identität oder Ausdruck, sexueller Orientierung, Alter, ethnischer oder sozialer Herkunft, Nationalität, Religion oder Weltanschauung, körperlichen Fähigkeiten, Familienstand, äußerem Erscheinungsbild oder jeder anderen Eigenschaft, die nach geltendem Recht kein Auswahlkriterium sein darf. Wir sind fest davon überzeugt, dass vielfältige Perspektiven, Erfahrungen und Lebenswege Teams bereichern und zu besseren Entscheidungen führen.
Role Description Deine Mission ist es, den sicheren Betrieb der IT- und OT-Systeme zu gewährleisten und sie gegen Cyber-Angriffe abzusichern. - Überwachung sicherheitsrelevanter Ereignisse, Bewertung von Schwachstellen und Ableitung technischer sowie organisatorischer Maßnahmen. - Einholung externer Dienstleister-Expertise inhouse. - Enge Zusammenarbeit mit IT, OT, QA und Compliance zur Übersetzung regulatorischer Anforderungen (z. B. NIS2, GxP) in operative Security-Prozesse. - Unterstützung der fachlichen Leitung bei der Vorbereitung und Durchführung von Maßnahmen zur Stärkung des Security-Awareness-Niveaus in den Fachbereichen. - Erste:r Ansprechpartner:in bezüglich Innovation, Weiterentwicklung und Optimierung zentraler Security-Technologien (Netzwerk, IAM, Endpoint, PAM). - Unterstützung bei der Erkennung, Priorisierung, Dokumentation und Eskalation von Cyber-Security-Incidents. - Hilfe bei der kontinuierlichen Weiterentwicklung von Security-Betriebsprozessen und Playbooks. Qualifications - Erfolgreich abgeschlossenes Studium, ideal Informatik, IT-Sicherheit oder Wirtschaftsinformatik (oder eine vergleichbare Qualifikation). - Mindestens 5 Jahre Berufserfahrung im Cyber-Security-Umfeld. - Mindestens eine relevante Zertifizierung (z. B. CISSP, GIAC, ISO 27001, SOC-, Incident-Response-Zertifikat). - Fundierte Berufserfahrung in den Bereichen Security Operations (SOC), Incident Response, SIEM oder sicherheitskritischer Betrieb. - Fähigkeit, Risiken sowie Schwachstellen analytisch und risikoorientiert zu bewerten. - Fließende Deutschkenntnisse (mindestens C1) und gute Englischkenntnisse. - Idealerweise Erfahrung in regulierten oder kritischen Umgebungen wie Pharma oder KRITIS. Benefits - Spannende Projekte im Bereich operative Cyber-Security (IT & OT) mit Fokus auf NIS2, GxP und ISO 27001. - Langfristige Projekte inhouse bei deinem Arbeitgeber. - Ein stabiles, erfolgreiches Unternehmen. - Lernen von externen und internen Fachexpert:innen. - Budgets für individuelle Fortbildungen. - Deutschland remote möglich mit ca. 20-30 Tagen/Jahr Treffen im Headquarter an der Ostsee für Workshops und Team Events. - Möglichkeit, für bis zu 2 Monate im EU-Ausland zu arbeiten. - Ein Büro im Herzen Berlins mit einem innovativen und pragmatischen Team. - Eine freundliche, hilfsbereite Unternehmenskultur. - Firmenevents. - 30 plus 2 Tage Urlaub. - Attraktives Gehalt, wovon 10% variabler Anteil sind.
• Lead enterprise security infrastructure projects from planning through implementation • Coordinate security, infrastructure, engineering, and operations teams • Manage encryption and certificate lifecycle initiatives • Oversee enterprise key management implementations • Coordinate Public Key Infrastructure (PKI) activities • Ensure project delivery meets quality, schedule, and budget expectations • Identify technical risks and develop mitigation strategies • Communicate with executive sponsors and project stakeholders • Manage project documentation and reporting • Ensure compliance with enterprise governance standards • Coordinate vendor relationships when required • Support security audits and compliance initiatives • Resolve cross-project conflicts and resource constraints • Drive continuous improvement across security engineering processes • Mentor junior project managers and technical team members
• assessing and mitigating the risk of doing business in today's hyper-connected world • work directly with Akamai's IT and engineering organizations providing security design guidance for new and existing applications, systems and platforms • researching and staying current on adversarial techniques, emerging vulnerabilities, and related detection and response strategies • conducting network, application and system security assessments to identify risks and provide mitigation strategies • assisting with design and deployment of security risk mitigating controls • performing compliance and policy-based investigations of internal systems • documenting security guidelines, procedures, and policies with a particular emphasis on NIST 800-53 and NIST 800-171 • providing security guidance and consultation to Akamai business units • leveraging emerging AI capabilities to enhance new and existing processes and automation • developing scripts and tools to support the above functions



