IT Audit & Security Specialist

About the role

Nestlé's Internal Audit program, of about 4 years, offers a chance to understand IT functions and processes worldwide. IT auditors travel around 50% of the time on a fixed calendar, using proven methodologies, tools and data analytics to give risk assurance and improvement recommendations. This position is based at the Nestlé Internal Audit IT Hub in Barcelona, on a permanent contract, hybrid or remote, with 40-50% travel and fluent business English required.

Key responsibilities

• Scan the network to find interesting devices, open ports and vulnerabilities
• Evaluate system security: switch configurations, firewall rules, OS hardening, databases, cloud platforms and SAP
• Evaluate the security of websites, databases, cloud platforms and applications
• Write PowerShell scripts to query Active Directory and analyse extractions using R, Python or other languages
• Present findings to the organisation and agree remediation actions

Required profile

• 2-4 years of experience in this area
• Hands-on IT experience and in-depth knowledge of cyber security, pen-testing, SAP, database management, IT networks, Windows and UNIX systems, Azure/AWS and Active Directory
• Engineering, Computer Science, IT or Mathematics degree or equivalent
• Strong analytical skills, able to handle large volumes of data
• Fluent written and spoken English; willingness to travel internationally 40-50% of the time

Required skills

• Scripting and programming (PowerShell, Python, C/C++)
• Network scanning (e.g. nmap)
• Data analysis with R, Python and MS Excel

What we offer

• Competitive salary and a comprehensive social benefits package, including a pension plan, health insurance, restaurant card and mobility plan
• Ongoing training and career opportunities
• Hybrid working with a flexible scheme
• Campus with medical centre, canteen and recreation activities such as yoga and Zumba