Job Description

Senior IT Auditor (ISO27001 & Cybersecurity)

Belgium | Contract (Part-time, Time & Material)
Start Date: 19 May 2026 | End Date: 17 December 2026
Possible Extension: 6 months
Work Regime: 40% (Part-time)

About the Role

We are seeking an experienced Senior IT Auditor to support three key audit engagements focused on information security, IT governance, and cybersecurity maturity

The role involves working independently within an internal audit function, applying professional audit standards, and delivering clear, risk-based insights to stakeholders.

Key Responsibilities

You will be responsible for planning and executing IT-focused audit assignments, including:

• ISO27001 audits
  • 
    Assessing the maintenance and maturity of ISO27001 certification
  • 
    Testing the design, implementation, and effectiveness of controls
  • 
    Following up on previous audit findings
• IT System Lifecycle Management audit
  • 
    Conducting a risk-based audit of end-to-end IT system lifecycle processes
  • 
    Evaluating governance, decision-making, and control effectiveness
  • 
    Reviewing the controlled decommissioning of legacy systems
• Cybersecurity audit framework support
  • 
    Supporting the implementation of IIA Topical Requirement Cybersecurity
  • 
    Aligning cybersecurity requirements with audit methodology and reporting standards
• 
  Reporting findings, risks, and recommendations clearly and professionally in line with IIA standards

What We're Looking For

• 
  Minimum 5 years of experience as an IT / Internal Auditor
• 
  Strong knowledge of audit methodologies (GIAS or equivalent IIA standards)
• 
  Experience conducting IT audits and risk-based audits
• 
  Proven experience with ISO27001 audits
• 
  Solid understanding of cybersecurity principles in an audit context
• 
  Knowledge of ISO 27000 series standards
• 
  Experience in internal audit environments
• 
  Strong analytical, reporting, and stakeholder communication skills
• 
  Ability to work independently and objectively
• 
  Fluency in Dutch (CEFR C2 level required)

Nice to Have

• 
  Experience with IIA Topical Requirements (Cybersecurity)
• 
  Familiarity with large-scale enterprise IT environments

Work Environment

You will join an internal audit team working across IT, cybersecurity, and governance domains. The assignment includes collaboration with various stakeholders and occasional travel between offices in Belgium.

The role allows for hybrid working, with telework possible depending on team coordination and audit requirements.

Audit Focus Timeline

• ISO27001 audits scheduled between October – December 2026
• 
  Flexibility required based on audit stakeholder availability

Additional Information

• 
  Assignment type: Time & Material contract
• 
  Selection weight: 50% quality / 50% price
• 
  Occasional travel may be required
• 
  Telework is possible but not guaranteed (based on team agreement)