Security Auditor

GigaCloud is a Ukrainian cloud provider, helping companies since 2016 to confidently migrate data and services online: with ease, clarity and sense of support every step of the way.

We have implemented cloud projects for over 1,500 companies, including large enterprises and public agencies. Thanks to our cloud solutions, over 20 million people every day make payments, access online documents, work files etc. We also have the largest partner program on the Ukrainian cloud market, which allows us to cover the wide range of clients’ IT needs.

GigaCloud — a cloud that’s yours. We have everyone in their right place and on the same team. If you like what we do and how we do it, join us. Let's build the cloud together!

We are looking for an Security Auditor to join our Team.

Description

Assess customer environments against security and compliance requirements. Identify security gaps and provide practical recommendations to improve cybersecurity posture and certification readiness.

Main Responsibilities:

• Conduct security assessments and compliance audits.
• Identify security risks and compliance gaps.
• Support customers in certification and audit readiness.
• Develop and maintain security policies and procedures.
• Work with technical teams to implement and verify remediation actions.
• Prepare audit reports and provide security recommendations.

Main Requirements:

• 3+ years of experience in Information Security, IT Audit, or GRC.
• Experience with security audits and compliance assessments.
• Good understanding of information security and risk management.
• Experience creating security policies and documentation.
• Ability to work with technical teams and communicate audit findings.
• English level: B1 or higher.

Technical Knowledge

Security Knowledge:

• Security Assessments
• Security Compliance
• Risk Assessment
• System Hardening
• Security Controls
• Cloud and Infrastructure Security fundamentals

Standards:

• ISO 27001
• PCI DSS
• NIST CSF
• CIS Controls

Would Be a Big Plus

• ISO 27001 Lead Auditor, CISA, CISSP, or similar certifications.
• Experience supporting external certification audits.
• Technical background (System Administrator, Infrastructure Engineer, Security Engineer, Network Engineer, or DevOps) before moving into Security Audit or Compliance.

We offer:

• Hybrid work format;
• Official employment with full social benefits and health insurance;
• A fast-growing, ambitious company with a strong team;
• Modern offices in Kyiv and Warsaw, with new locations on the way. Our Kyiv office is fully equipped with backup power, heating, and internet;
• The opportunity to build innovative tech products and make an impact in cloud solutions and cybersecurity;
• A team of experienced professionals who are always ready to share their expertise.