IT Auditor (Internal Audits and Assessments), Helsinki

About the role

This role operates at the core of the organization's IT governance and cybersecurity. The primary responsibility is to execute agreed internal IT and cybersecurity audits, evaluate the design and operating effectiveness of controls, and translate audit evidence into actionable risk insights. It is a highly collaborative and outcome-driven position where the auditor leads yearly assurance rounds, trains application and service owners on compliance processes, and drives identified control gaps to actual closure. Success in this position requires a strong blend of technical understanding and business communication.

You are offered a hybrid work model with at least 1 day per week at the office, providing a balance of autonomy and collaboration. This is a high-quality role with the potential for extension and internal career growth.

Work tasks

This position focuses on IT service data configuration and internal audits, ensuring cybersecurity controls are robust and compliant with global frameworks.

• Execute internal audit plans covering IT general and cybersecurity controls
• Evaluate compliance with internal IT policies and the NIS2 Directive
• Review evidence, identify control gaps, recommend remediation actions and verify closure of findings
• Support management reporting, internal presentations and continuous improvement of the assurance and compliance process
• Utilize ServiceNow to create data, manage reports, and track audit evidence

We are looking for

• At least three years of IT audit experience, together with experience in IT compliance and/or information security governance
• Good understanding of identity and access management, security monitoring and logging, security operations and incident response, and vulnerability and patch management
• Knowledge of ISO 27001 and the NIS2 Directive and/or other cybersecurity frameworks such as CIS or NIST
• Competence in audit planning and execution, control design and effectiveness testing, evidence review, documentation and reporting
• Strong stakeholder management, report writing and presentation skills, including the ability to translate technical findings into business risks
• Ability to challenge constructively and independently and to work with senior leadership and internal and external auditors
• Practical experience in training, documentation creation and influencing stakeholders
• Fluent English skills

It is meritorious if you have

• Advanced knowledge of ServiceNow GRC/IRM modules
• CISA or ISO 27001 Lead Auditor certification
• Experience with SOC 1, SOC 2, or ISAE 3402 assurance frameworks
• Familiarity with ITIL and IT service-management governance

Our recruitment process

This recruitment process is handled by Academic Work and it is our client’s wish that all questions regarding the position is directed to Academic Work. Our client company will be revealed at the end of the recruitment process. Our client is a global, Nordic-headquartered enterprise leader operating in the sustainable materials and process industry, with operations across multiple continents.

Our selection process is continuous and the advert may close before the recruitment process is completed if we have moved forward to the next phase. The process includes two tests: one personality test and one cognitive test. The tests are tools to find the right talent for the right position, to enable equality, diversity, and a fair process.